Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Microsoft 365 Certified: Endpoint Administrator Associate · Microsoft
Hot Area / Sentence Completion
Select the appropriate option to complete the statement. Click Check Answer below to see the marked solution.
Hotspot Solution:
Risk types and detection Risk can be detected at the User and Sign-in level and two types of detection or calculation Real-time and Offline. Some risks are considered premium available to Microsoft Entra ID P2 customers only, while others are available to Free and Microsoft Entra ID P1 customers. A sign-in risk represents the probability that a given authentication request isn't the authorized identity owner. Risky activity can be detected for a user that isn't linked to a specific malicious sign-in but to the user itself. Real-time detections might not show up in reporting for 5 to 10 minutes. Offline detections might not show up in reporting for 48 hours.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
1. Sign-in Risk Policy: Atypical Travel: The Sign-in Risk Policy focuses on real-time risks detected during sign-in, such as unusual sign-in behavior like atypical travel, where a user signs in from an unexpected or impossible geographic location. 2. User Risk Policy: Leaked Credentials: The User Risk Policy focuses on longer-term risk indicators that relate to the overall security of the user's identity, such as detected leaked credentials. This reflects a breach where the user's credentials might have been compromised. Correct options: Sign-in Risk Policy: Atypical Travel User Risk Policy: Leaked Credentials
https://learn.microsoft.com/en-us/entra/id-protection/concept-identity-protection-risks#sign-in-risk-detections Risk types and detection Risk can be detected at the User and Sign-in level and two types of detection or calculation Real-time and Offline. Some risks are considered premium available to Microsoft Entra ID P2 customers only, while others are available to Free and Microsoft Entra ID P1 customers. A sign-in risk represents the probability that a given authentication request isn't the authorized identity owner. Risky activity can be detected for a user that isn't linked to a specific malicious sign-in but to the user itself. Real-time detections might not show up in reporting for 5 to 10 minutes. Offline detections might not show up in reporting for 48 hours.
- Atypical travel - Leaked credentials