In the context of securing high-risk applications, such as those handling financial transactions, Microsoft Entra Conditional Access policies offer a robust framework for enforcing strict security measures. Considering the need for both security and usability, which of the following statements accurately describe how these policies can be tailored to mitigate risks? (Choose two options from A, B, C, D)