MS-100 Risk Assessment & Management 2

Question 1

A security administrator needs to identify users whose credentials may have been leaked on the dark web. Which Microsoft 365 feature detects this risk?

Accepted Answer

Identity Protection leaked credentials detection

Answer

Azure AD Identity Protection automatically detects leaked credentials by comparing user credentials against known breached credential lists.

Question 2

An organization wants to require additional verification when a sign-in risk level is 'High'. Which Identity Protection policy type should be configured?

Accepted Answer

Sign-in risk policy

Answer

A sign-in risk policy in Identity Protection evaluates real-time risk signals during authentication and can enforce MFA or block access based on the detected risk level.

Question 3

After remediating a compromised account, what action should an admin take in Identity Protection to reset the user's risk state?

Accepted Answer

Dismiss the user risk

Answer

Dismissing the user risk in Identity Protection manually resets the risk state after an admin has confirmed the account is secure.

Question 4

Which risk detection in Azure AD Identity Protection indicates that a user signed in from an IP address associated with anonymous proxy services?

Accepted Answer

Anonymous IP address

Answer

The 'Anonymous IP address' risk detection fires when a sign-in originates from a known anonymizing service like Tor or VPNs used to mask identity.

Question 5

A Conditional Access policy is set to require MFA when sign-in risk is Medium or above. A user with a High risk sign-in successfully passes MFA. What is the resulting risk state?

Accepted Answer

Risk remains High until manually dismissed or self-remediated

Answer

Completing MFA satisfies the Conditional Access grant control but does not automatically lower or dismiss the Identity Protection risk level; the risk state persists until remediated.

MS-100 - Microsoft 365 Identity and Services Practice Test

MS-100 - Microsoft 365 Identity and Services Practice Test

MS-100 Risk Assessment & Management 2