フリー問題

問題文

An autonomous agent runs on a schedule with no signed-in user and accesses a resource with its own identity. When you write a Conditional Access policy to control this access, what must you target?

選択肢

1. The agent identity itself, because in the application-only flow the agent is the subject of the token.
2. The target resource only, because the subject cannot be evaluated for nonhuman identities.
3. Nothing; Conditional Access is not evaluated for autonomous agents.
4. The users and groups that own the agent, because Conditional Access can target only users and never a workload identity such as an agent.