Explanation
Text, letter Description automatically generated

Explanation
Graphical user interface, text, application, email Description automatically generated

Box 1: Yes
Conditional access policies can be applied to all users
Box 2: No
Conditional access policies are applied after first-factor authentication is completed.
Box 3: Yes
Users with devices of specific platforms or marked with a specific state can be used when enforcing Conditional Access policies.

Explanation
Graphical user interface, text, application Description automatically generated

Federation is a collection of domains that have established trust. Reference:
https://docs.microsoft.com/en-us/azure/active-directory/hybrid/whatis-fed

Reference:
https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/overview