A company uses Microsoft 365. The company requires that you implement least privileged access. You need to recommend solutions that meet the requirements. Which two solutions should you recommend? Eac

Device compliance policies enforce security baselines on endpoints but do not control or limit the scope of user privileges, so they do not directly implement least privileged access.

IP address range restrictions are a conditional access control that limits where users can connect from, but they do not restrict the level of permissions or privileges a user holds, making them unrelated to least privilege.

Just-in-time (JIT) access, available through Microsoft Entra Privileged Identity Management (PIM), ensures users only have elevated privileges for a limited time window when needed, eliminating standing administrative access and directly enforcing least privilege by granting rights only on demand and revoking them automatically after the session or approval period ends.

Privileged Access Workstations (PAW) are hardened, dedicated devices used exclusively for administrative tasks, ensuring that privileged operations are performed from a secured, controlled environment that reduces the attack surface and enforces least privilege by isolating administrative actions from regular user activity.