Conditional Access can use signals to determine information about authentication attempts, and then determine whether to block access or require additional verifications, such as MFA.
Describe Azure identity, access, and security - Training | Microsoft Learn