Which of the following is a function of Conditional Access session controls?

Conditional Access session controls are designed to enhance security by governing user sessions based on specific conditions and policies set by an organization. The function of enabling limited experiences, such as blocking the download of sensitive information, aligns perfectly with the purpose of session controls. These controls allow organizations to dictate how and when access to resources should be restricted, thereby protecting sensitive data from unauthorized access or misuse during a user session.

This capability is especially crucial when working with sensitive information in environments where the risk of data leakage must be mitigated. By applying restrictions on actions such as downloading or printing, organizations can maintain tighter control over their data security posture while still allowing access to necessary resources under specific circumstances.

Other options may relate to broader aspects of security and compliance but do not specifically address the nuanced capabilities provided by session controls within Conditional Access, which focus on managing user sessions dynamically.