Explanation
Graphical user interface, text, application, email Description automatically generated

Box 1: Yes
Box 2: No
Conditional Access policies are enforced after first-factor authentication is completed. Box 3: Yes

Explanation:

Box 1: Yes
System updates reduces security vulnerabilities, and provide a more stable environment for end users. Not applying updates leaves unpatched vulnerabilities and results in environments that are susceptible to attacks.
Box 2: Yes
Box 3: Yes
If you only use a password to authenticate a user, it leaves an attack vector open. With MFA enabled, your accounts are more secure.

Explanation
Graphical user interface, text, application Description automatically generated

Federation is a collection of domains that have established trust. Reference:
https://docs.microsoft.com/en-us/azure/active-directory/hybrid/whatis-fed