Microsoft Security, Compliance, and Identity Fundamentals (SC-900)Describe the capabilities of Microsoft EntraMedium
A security administrator needs to ensure that users are automatically prevented from signing in if their account shows signs of compromise, such as impossible travel or sign-ins from known malicious IP addresses. Which Microsoft Entra capability provides this automated protection?
- AMicrosoft Entra PIM (Privileged Identity Management)
- BMicrosoft Entra Conditional Access
- CMicrosoft Entra Access Reviews
- DMicrosoft Entra Identity Protection
Show answer & explanationAnswer & explanation
Correct answer: D. Microsoft Entra Identity Protection
Microsoft Entra Identity Protection is specifically designed to detect, investigate, and remediate identity-based risks, including impossible travel and sign-ins from malicious IP addresses, and can automatically block or challenge compromised users.
Why the other options are wrong
- A. PIM manages privileged role assignments, not real-time risk detection.
- B. Conditional Access enforces policies based on conditions, but Identity Protection feeds the risk signals that Conditional Access can then act upon.
- C. Access Reviews ensure access rights are appropriate, not for real-time sign-in risk.
Microsoft Entra Identity Protection
A feature that automates the detection, investigation, and remediation of identity-based risks, such as compromised credentials and suspicious sign-in activities.
- Detects risks like impossible travel, leaked credentials, and malicious IP addresses.
- Provides risk scores for users and sign-ins.
- Can automatically block access or enforce MFA based on risk levels.
Memory trick: Identity Protection: Your digital bodyguard, always watching.