SC-300 Azure AD Identity Protection

Question 1

Which Identity Protection policy automatically blocks or requires MFA for sign-ins that are detected as medium or high risk?

Accepted Answer

Sign-in risk policy

Answer

The sign-in risk policy in Identity Protection evaluates the risk level of each authentication request and can block access or require MFA based on the configured risk threshold.

Question 2

Which risk detection type in Azure AD Identity Protection flags sign-ins from IP addresses associated with anonymous proxies or Tor networks?

Accepted Answer

Anonymous IP address

Answer

The 'Anonymous IP address' risk detection identifies sign-ins originating from IP addresses used by anonymizing services such as Tor browsers and anonymous VPN providers.

Question 3

A user's account is flagged with a high user risk in Azure AD Identity Protection. Which remediation action can the user self-perform to resolve the risk?

Accepted Answer

Perform a secure password change via SSPR

Answer

Users with high user risk can self-remediate by performing a secure password reset through SSPR, which signals to Identity Protection that the compromised credential has been changed.

Question 4

What minimum license is required to access Azure AD Identity Protection risk reports and configure risk policies?

Accepted Answer

Azure AD Premium P2

Answer

Azure AD Identity Protection features, including risk policies and detailed risk detection reports, require an Azure AD Premium P2 license.

Question 5

Which Identity Protection policy is used to enforce MFA registration for users who have not yet registered their authentication methods?

Accepted Answer

MFA registration policy

Answer

The MFA registration policy in Identity Protection targets users who have not registered for MFA and prompts them to complete registration during their next sign-in.

SC-300 - Microsoft Identity and Access Administrator Practice Test

SC-300 - Microsoft Identity and Access Administrator Practice Test

SC-300 Azure AD Identity Protection