Conditional Access policies control access based on conditions such as user risk, device state, or application context. They do not directly affect account authentication or respond to disabled account states in Active Directory.
If a user's on-premises account is disabled, Azure AD still allows cached credentials to authenticate until the next sync (if using PHS). Conditional Access cannot force immediate disablement - it only acts after successful authentication attempts.
From Microsoft Learn:
"Conditional Access evaluates access after authentication and cannot prevent sign-in for disabled or deleted accounts during synchronization delay." Therefore, Conditional Access does not meet the goal of instantly preventing authentication when an AD account is disabled.
# Correct Answer: B. No