Microsoft Security, Compliance, and Identity Fundamentals (SC-900)Describe the capabilities of Microsoft EntraMedium
A security administrator wants to implement a solution that proactively detects and remediates identity-based risks, such as leaked credentials, impossible travel, and anomalous sign-in activities, within Microsoft Entra ID. Which Microsoft Entra capability is designed for this purpose?
- AMicrosoft Entra Access Reviews
- BMicrosoft Entra Identity Protection
- CMicrosoft Entra Privileged Identity Management (PIM)
- DMicrosoft Entra Conditional Access
Show answer & explanationAnswer & explanation
Correct answer: B. Microsoft Entra Identity Protection
Microsoft Entra Identity Protection is designed to detect, investigate, and remediate identity-based risks, including suspicious sign-in activities and compromised credentials, using machine learning and heuristics.
Why the other options are wrong
- A. Access Reviews periodically certifies user access, which is different from real-time risk detection.
- C. PIM manages privileged role access, not general identity risk detection.
- D. Conditional Access enforces policies based on conditions, but Identity Protection performs the risk detection.
Microsoft Entra Identity Protection
A capability that helps organizations detect, investigate, and remediate identity-based risks, such as compromised credentials and unusual sign-in patterns, using machine learning and heuristics.
- Detects real-time and offline risks
- Integrates with Conditional Access for automated responses
- Provides risk reports and investigations
Memory trick: The watchful eye that spots danger in your digital identity.