Practice Test GeeksSC-300 - Microsoft Identity and Access Administrator Practice Test
← All SC-300 Flashcard Decks

Azure AD Identity Protection Flashcards

6 cards from real SC-300 practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 6 Azure AD Identity Protection flashcards as text

  1. Which Identity Protection policy automatically blocks or requires MFA for sign-ins that are detected as medium or high risk?

    Answer: Sign-in risk policy

    The sign-in risk policy in Identity Protection evaluates the risk level of each authentication request and can block access or require MFA based on the configured risk threshold.

  2. Which risk detection type in Azure AD Identity Protection flags sign-ins from IP addresses associated with anonymous proxies or Tor networks?

    Answer: Anonymous IP address

    The 'Anonymous IP address' risk detection identifies sign-ins originating from IP addresses used by anonymizing services such as Tor browsers and anonymous VPN providers.

  3. A user's account is flagged with a high user risk in Azure AD Identity Protection. Which remediation action can the user self-perform to resolve the risk?

    Answer: Perform a secure password change via SSPR

    Users with high user risk can self-remediate by performing a secure password reset through SSPR, which signals to Identity Protection that the compromised credential has been changed.

  4. What minimum license is required to access Azure AD Identity Protection risk reports and configure risk policies?

    Answer: Azure AD Premium P2

    Azure AD Identity Protection features, including risk policies and detailed risk detection reports, require an Azure AD Premium P2 license.

  5. Which Identity Protection policy is used to enforce MFA registration for users who have not yet registered their authentication methods?

    Answer: MFA registration policy

    The MFA registration policy in Identity Protection targets users who have not registered for MFA and prompts them to complete registration during their next sign-in.

  6. An administrator wants to dismiss all active risk detections for a specific user who was confirmed safe after investigation. Which action should they take in Identity Protection?

    Answer: Dismiss user risk

    The 'Dismiss user risk' action in Identity Protection clears all active risk detections associated with a user, resetting their risk level to none after an investigation confirms they are safe.