A company uses Azure Active Directory. The company requires that authentication requests from client applications that do not support modern authentication are blocked. You need to identify the policy

Conditional Access policies in Azure AD include a built-in condition called 'Client apps' that allows administrators to target legacy authentication clients (such as those using SMTP, IMAP, POP3, and older Office clients). By creating a Conditional Access policy that targets these legacy client app types and applies a 'Block access' grant control, organizations can effectively prevent authentication requests from clients that do not support modern authentication protocols like OAuth 2.0.

Multi-factor authentication registration policy is used to enforce MFA enrollment for users but does not provide the ability to block specific client application types based on their authentication protocol support.

Sign-in risk policy evaluates the probability that a sign-in was performed by an unauthorized party based on behavioral signals, but it does not have the capability to filter or block based on the type of authentication protocol used by the client application.

User risk policy assesses the likelihood that a user account has been compromised by detecting anomalous user behaviors, but it cannot selectively block authentication requests based on whether the client app supports modern authentication.