What should you configure?

You publish an enterprise application named App1 that process financial data.

You need to ensure that access to App1 is revoked for users who no longer require view the processed financial data.

What should you configure?
A . An access review
B. An app protection policy
C. A conditional access policy
D. An owner

Answer: A

Explanation:

Reference: https://docs.microsoft.com/en-us/azure/active-directory/governance/create-access-review