thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Cloud Computing · Advanced

Microsoft Entra ID Protection

Entra ID feature that detects identity risks such as leaked credentials and risky sign-ins and enforces risk-based policies.

Definition

ID Protection calculates user risk and sign-in risk using signals such as leaked credentials, anonymous IP addresses, atypical travel and password spray. Risk-based Conditional Access policies can require MFA or a secure password change, and findings can be exported to SIEM tools. It requires Entra ID P2.

Example

A sign-in from an anonymous Tor IP is flagged high risk and the user must complete MFA.

Exam tip

User risk relates to compromised accounts (e.g., leaked credentials); sign-in risk relates to a specific authentication attempt.

Related terms