Explanation
Graphical user interface, text, application, email Description automatically generated

Box 1: Yes
Box 2: No
Conditional Access policies are enforced after first-factor authentication is completed. Box 3: Yes

Reference:
https://docs.microsoft.com/en-us/microsoft-365/compliance/advanced-audit?view=o365-worldwide

Explanation
Conditional Access session controls enable user app access and sessions to be monitored and controlled in real time based on access and session policies.
Based on this definition, the best answer for your question is B. enable limited experiences, such as blocking download of sensitive information.
https://learn.microsoft.com/en-us/azure/active-directory/conditional-access/concept-conditional-access-session

Reference:
https://docs.microsoft.com/en-us/azure/ddos-protection/ddos-protection-overview

Explanation
Graphical user interface, text, application, email Description automatically generated

Box 1: No
Compliance Manager tracks Microsoft managed controls, customer-managed controls, and shared controls.
Box 2: Yes
Box 3: Yes