Microsoft Security, Compliance, and Identity Fundamentals (SC-900)Describe the capabilities of Microsoft EntraMedium
A security team observes unusual sign-in patterns, such as sign-ins from unfamiliar locations or impossible travel scenarios, for several user accounts. They want to automatically detect and respond to these identity-based risks. Which Microsoft Entra capability provides this functionality?
- AMicrosoft Entra Conditional Access
- BMicrosoft Entra Application Proxy
- CMicrosoft Entra Identity Protection
- DMicrosoft Entra Access Reviews
Show answer & explanationAnswer & explanation
Correct answer: C. Microsoft Entra Identity Protection
Microsoft Entra Identity Protection is designed to detect and automatically respond to identity-based risks, including unusual sign-in patterns like impossible travel and sign-ins from unfamiliar locations.
Why the other options are wrong
- A. Conditional Access enforces policies based on conditions but doesn't inherently detect unusual sign-in patterns.
- B. Application Proxy provides secure remote access to on-premises apps, not risk detection.
- D. Access Reviews are for periodic verification of access, not real-time risk detection.
Microsoft Entra Identity Protection
A feature of Microsoft Entra ID that helps organizations detect, investigate, and remediate identity-based risks by identifying suspicious user behavior and potential vulnerabilities.
- Detects identity-based risks (e.g., impossible travel, unfamiliar locations).
- Identifies compromised credentials.
- Automates responses to mitigate risks.
Memory trick: Identity Protection watches for bad actors around your identity.