Reference:
https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/overview

Reference:
https://docs.microsoft.com/en-us/cloud-app-security/what-is-cloud-app-security

Conditional Access session controls enable user app access and sessions to be monitored and controlled in real time based on access and session policies.
Based on this definition, the best answer for your question is B. enable limited experiences, such as blocking download of sensitive information.
https://learn.microsoft.com/en-us/azure/active-directory/conditional-access/concept-conditional-access-session

Reference:
https://docs.microsoft.com/en-us/microsoft-365/enterprise/about-microsoft-365-identity?view=o365-worldwide