Chapter 5 – Azure AD Identity Protection

1. b. Flagged Users

   Explanation: N/A

2. a. True

   Explanation: An MFA registration policy may be configured from the Azure AD Identity Protection portal under the Protect section.

3. b. MFA authentication

   Explanation: MFA in fact helps to mitigate sign-in risk.

4. b. Azure AD Premium P2

   Explanation: Identity Protection is not available with the other subscriptions.

5. a. True

   Explanation: This can be achieved by using User risk and Sign in risk policies from Azure AD Identity Protection.

6. b. 14 days

   Explanation: N/A

7. c. Ensure your break-glass account is excluded from the user risk policy and the sign-in risk policy.

   Explanation: The other options are not relevant to the goal.

8. b. False

   Explanation: With a user risk policy, you may enforce a password reset. To enforce MFA, you would use a sign-in risk policy.

9. c. Moderate

   Explanation: No such level exists.

10. a. True

    Explanation: Administrators may apply these settings in Azure...