Explanation:

According to the Microsoft SC-300: Identi ty and Access Administrator Study Guide and the Microsoft Learn module "Implement Conditional Access Policies," the Azure AD Conditional Access engine uses a structured framework that consists of conditions, grant controls, and session controls.
1# # Configure HighRiskCountries by using A condition In Conditional Access, conditions define the circumstances under which a policy applies. Named locations (such as HighRiskCountries ) are part of the Locations condition. When configuring a Conditional Access policy, administrators can include or exclude sign-ins based on IP address ranges, country/region, or named locations.
Microsoft documentation states: "You can define named locations to specify IP ranges or countries/regions and use them as conditions in your C onditional Access policies." Thus, HighRiskCountries should be configured as a condition within the policy to target sign-ins from those regions.
2# # Configure Sign-in frequency by using A session control Session controls in Conditional Access determine how sessions behave after a user successfully signs in. The Sign-in frequency setting controls how often users must reauthenticate, effectively limiting the duration of their authentication session.
Microsoft Learn reference: "Session controls, such as sig n-in frequency and persistent browser session, enable administrators to enforce how often users must reauthenticate." Therefore, to restrict how long a user can remain authenticated when signing in from high-risk countries, you configure Sign-in frequency as a session control.
# Final Correct Answers:
* HighRiskCountries: A condition
* Sign-in frequency: A session control