SC-300 Azure AD Identity Protection 3

Question 1

Which Azure AD Identity Protection feature integrates with Microsoft Sentinel to stream risk events for advanced threat hunting?

Accepted Answer

Identity Protection diagnostic settings

Answer

Azure AD audit log streaming

Answer

Microsoft Defender XDR integration

Answer

Workbook templates

Question 2

What is the primary purpose of the 'Workbooks' section within Azure AD Identity Protection?

Accepted Answer

To visualize risk trends and identity health metrics using pre-built dashboards

Answer

To configure risk policy thresholds

Answer

To manage access reviews for risky users

Answer

To export risk detections to CSV format

Question 3

An Identity Protection sign-in risk policy is set to require MFA for medium and high risk sign-ins. A user is prompted for MFA and successfully completes it. What happens to the sign-in risk?

Accepted Answer

The risk is automatically dismissed as remediated

Answer

The risk remains until an administrator manually dismisses it

Answer

The sign-in is blocked despite successful MFA

Answer

The user's account is automatically locked

Question 4

Which risk detection indicates that a user's sign-in properties such as browser, ASN, and IP address significantly differ from the user's historical sign-in patterns?

Accepted Answer

Unfamiliar sign-in properties

Answer

Anonymous IP address

Answer

Atypical travel

Answer

Malware linked IP address

Question 5

A user successfully completes SSPR to reset their password after being flagged by Identity Protection. What is the result on their user risk level?

Accepted Answer

User risk is automatically remediated and reset to none

Answer

User risk is increased to high

Answer

User risk remains unchanged until reviewed by an admin

Answer

User risk is set to medium pending review

Question 6

Which Identity Protection configuration setting controls the percentage of the organization's users who must be covered by the MFA registration policy?

Accepted Answer

Users scope — All users or specific groups

Answer

Risk threshold

Answer

Policy enforcement state

Answer

MFA registration deadline