What should you create?

Your company has a Microsoft 365 subscription.

The company forbids users to enroll personal devices in mobile device management (MDM).

Users in the sales department have personal iOS devices.

You need to ensure that the sales department users can use the Microsoft Power BI app from iOS devices to access the Power BI data in your tenant.

The users must be prevented from backing up the app’s data to iCloud.

What should you create?
A . a conditional access policy in Microsoft Azure Active Directory (Azure AD) that has a device state condition
B . an app protection policy in Microsoft Intune
C . a conditional access policy in Microsoft Azure Active Directory (Azure AD) that has a client apps condition
D . a device compliance policy in Microsoft Intune