You have a Microsoft 365 E5 subscription.

 Conditions: Set " User risk " to " High "

To enforce MFA based on user risk, you need to configure the Conditional Access policy to trigger when the user risk level is high. This setting ensures that the policy is applied only to users who have a high-risk level.

 Grant: Require multi-factor authentication

This setting enforces MFA for users who meet the condition set (high user risk). Requiring MFA ensures that users must provide additional verification, enhancing security for high-risk sign-ins.