You are the administrator of the Contoso financial group. You are responsible for managing the identities in Azure. Whilst monitoring login events you notice that some of the traveling sales staff log in to Exchange online from around the world. You need to add a second layer of authentication for the sales staff when they are trying to log in from random countries across the world. Select all the technologies that will be able to accomplish this goal.
Conditional Access is correct, as this allows rules to be created that specifies specific criteria like where selected users usually sign in from when they sign in from another location they should be met with an MFA challenge to complete their login. Privilege Identity management will not suffice as this enables users to activate additional roles with their identity like Global Admin. MFA by itself will not suffice as there are limited options, either enabled, enforced or disabled and no automatic intelligence associated with it. Identity Protection will also work as this is mainly associated with risky sign-ins and can request the user to authenticate via MFA as well.