Questions on Conditional Access

Hi all Azure experts out there, is anyone able to answer a couple of questions i have on conditional access policies?

1) if  you have a connection matching both a block policy, and an allow plicy. Does the block take precedence?

As i do not see any way to put them into an order, so presume it does.

2) if a connection does not match a policy, is that a default 'allow' or 'block'.

thanks in advance,