Microsoft Security, Compliance, and Identity Fundamentals SC-900 Practice Question

Microsoft Entra ID Protection includes a dedicated sign-in risk policy. When enabled, the policy continually evaluates the risk level of each authentication attempt and can automatically enforce a required action, such as requiring multifactor authentication or blocking access, whenever the configured risk threshold is met. A user risk policy evaluates the aggregate risk for the user account rather than individual sign-ins, while password protection policies only deal with password strength and banning common passwords. Privileged Identity Management activation policies relate to just-in-time role assignments, not risk-based automated remediation.