To require Azure Virtual Desktop users to reauthenticate every six hours, what should you do first?

To enforce a reauthentication frequency for Azure Virtual Desktop users, you must create a Conditional Access policy. Conditional Access policies allow you to define conditions under which users can access resources, including session lifetime and sign-in frequency. By configuring the sign-in frequency setting within a Conditional Access policy, you can specify that users must reauthenticate every six hours. Disabling Security defaults is incorrect because Security defaults provide baseline security protections but do not offer granular control over reauthentication frequency. Configuring an authentication methods policy is used to manage the methods users can employ for authentication (e.g., FIDO2, Microsoft Authenticator), not to dictate reauthentication intervals. Configuring multi-factor authentication (MFA) enhances security by requiring multiple verification factors but doesn't inherently control the reauthentication frequency; that control resides within Conditional Access.