Microsoft 365 Certified: Administrator Expert Practice Mode

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• 1

  Q34 User risk policy Require password change User risk represents the probability that a given identity or account is compromised. Leaked credentials - dark web https://learn.microsoft.com/en-us/entra/id-protection/concept-identity-protection-risks#leaked-credentials Sign-in risk represents the probability that a given authentication request (session) wasn't made by the identity owner. Example - Activity from anonymous IP address. A secure password change using self-service password reset is the only way to self-remediate user risk, regardless of the risk level. A successful multifactor authentication is the only way to self-remediate the sign-in risk, regardless of the risk level. https://learn.microsoft.com/en-us/entra/id-protection/howto-identity-protection-configure-risk-policies

• 1

  correct: Just in User risc you have the option to change the password https://learn.microsoft.com/de-de/entra/id-protection/concept-identity-protection-policies

• 1

  https://learn.microsoft.com/en-us/entra/id-protection/concept-identity-protection-risks User risk detections might flag a legitimate user account as at risk, when a potential threat actor gains access to an account by compromising their credentials or when they detect some type of anomalous user activity. Sign-in risk detections represent the probability that a given authentication request isn't the authorized owner of the account. Having the ability to identify risk at the user and sign-in level is critical for customers to be empowered to secure their tenant.