You use app protection policies to safeguard corporate data on Android devices. To ensure that Android users can access corporate data only when they use apps that support mobile application management (MAM), which configuration should you apply?

A Conditional Access policy is the correct choice because it allows you to enforce requirements for accessing corporate resources. Specifically, you can configure a Conditional Access policy to require that devices accessing corporate data are using approved client apps, which in this context means apps that support Mobile Application Management (MAM). An app configuration policy is used to deploy settings to an app, not to restrict access based on app protection. A device configuration profile applies settings to the device itself, like Wi-Fi or VPN, but doesn't enforce app protection for data access. A device compliance policy checks the health and security posture of the device, but doesn't directly enforce the use of MAM-protected apps for data access.