Which two types of objects should you include in the recommendation?

You are designing an Azure web app that will use Azure Active Directory (Azure AD) for authentication.

You need to recommend a solution to provide users from multiple Azure AD tenants with access to App1. The solution must ensure that the users use Azure Multi-Factor Authentication (MFA) when they connect to App1.

Which two types of objects should you include in the recommendation? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.
A . Azure AD managed identities
B . an identity Experience Framework policy
C . Azure AD conditional access policies
D . a Microsoft intune app protection policy
E . an Azure application security group
F . Azure AD guest accounts

Answer: A,C

Explanation:

https://docs.microsoft.com/en-us/azure/active-directory/develop/v2-conditional-access-dev-guide

https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/howto-conditional-access-policy-azure-management