Exam MS-100 topic 5 question 22 discussion

Since no one like to provide proof, its C because "Access to groups and applications for employees and guests changes over time. To reduce the risk associated with stale access assignments, administrators can use Azure Active Directory (Azure AD) to create access reviews for group members or application access." https://docs.microsoft.com/en-us/azure/active-directory/governance/create-access-review#:~:text=Access%20to%20groups%20and%20applications%20for%20employees%20and%20guests%20changes%20over%20time.%20To%20reduce%20the%20risk%20associated%20with%20stale%20access%20assignments%2C%20administrators%20can%20use%20Azure%20Active%20Directory%20(Azure%20AD)%20to%20create%20access%20reviews%20for%20group%20members%20or%20application%20access.

C for sure!

Makes sense, Access reviews have to option to automatically process recommendations and for example remove access for users that are not active. The Access review can be sent to reviewer(s) periodically and they can manually select users to remove, Conditional access could be used, for example with a group condition but is very unpractical as the group still needs reviewing. App protection does what the name suggests and is used to configure the context in which the app or its data can be used. Owner I dont know