Global Secure Access, Enable compliant network check with Conditional Access A: Organizations who use Conditional Access along with the Global Secure Access, can prevent malicious access to Microsoft apps, third-party SaaS apps, and private line-of-business (LoB) apps using multiple conditions to provide defense-in-depth. These conditions might include device compliance, location, and more to provide protection against user identity or token theft.
Global Secure Access introduces the concept of a compliant network within Microsoft Entra ID Conditional Access. This compliant network check ensures users connect from a verified network connectivity model for their specific tenant and are compliant with security policies enforced by administrators.
C: Compliant network check data plane enforcement (preview) with Continuous Access Evaluation is supported for SharePoint Online and Exchange Online.
Compliant network check is currently not supported for Private Access applications.
Reference:
https://learn.microsoft.com/en-us/entra/global-secure-access/reference-current-known-limitations
https://learn.microsoft.com/en-us/entra/global-secure-access/how-to-compliant-network