Which two conditions must be met before endpoint users can access the corporate applications again?

A customer follows the Zero Trust model and explicitly verifies each attempt to access its corporate applications.

The customer discovers that several endpoints are infected with malware.

The customer suspends access attempts from the infected endpoints.

The malware is removed from the end point.

Which two conditions must be met before endpoint users can access the corporate applications again? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.
A . Microsoft Defender for Endpoint reports the endpoints as compliant.
B . Microsoft Intune reports the endpoints as compliant.
C . A new Azure Active Directory (Azure AD) Conditional Access policy is enforced.
D . The client access tokens are refreshed.

Answer: C,D