Microsoft 365 FundamentalsDescribe security, compliance, privacy, and trust in Microsoft 365Easy
A Microsoft 365 administrator is configuring a new tenant for an organization that operates in a highly regulated industry. The organization needs to ensure that user access to Microsoft 365 services is always verified and that only authorized devices can access corporate resources. Which Microsoft 365 capability should the administrator implement to meet these requirements?
- AMicrosoft Defender for Cloud Apps
- BAzure AD Identity Protection
- CMicrosoft Purview eDiscovery
- DMicrosoft Entra Verified ID
Show answer & explanationAnswer & explanation
Correct answer: B. Azure AD Identity Protection
Azure AD Identity Protection helps organizations detect, investigate, and remediate identity-based risks. It uses machine learning to identify suspicious activities related to user identities and automatically responds to protect the organization.
Why the other options are wrong
- A. Microsoft Defender for Cloud Apps (formerly MCAS) is a Cloud Access Security Broker (CASB) that provides visibility into cloud apps and services, not primary identity verification.
- C. Microsoft Purview eDiscovery focuses on legal holds and content searches for compliance, not real-time identity verification.
- D. Microsoft Entra Verified ID enables decentralized identity and verifiable credentials, which is different from real-time risk-based access control.
Azure AD Identity Protection
A feature of Azure Active Directory that helps organizations detect, investigate, and remediate identity-based risks. It uses machine learning to identify suspicious activities like compromised credentials and unusual sign-in locations.
- Detects identity-based risks automatically.
- Integrates with Conditional Access for enforcement.
- Identifies vulnerabilities like weak passwords or multi-factor authentication not registered.
Memory trick: Identity Protection: Your digital bodyguard, always watching, always ready to defend your access.