thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Security Fundamentals & Crypto · Intermediate

Risk-Based Authentication

Adjusting authentication requirements dynamically based on the calculated risk of each sign-in.

Definition

Risk-based (adaptive) authentication scores sign-ins using signals such as unfamiliar location, impossible travel, anonymous IPs, leaked credentials, and device reputation. Low-risk sign-ins proceed smoothly, while high-risk ones require step-up MFA or are blocked. Microsoft Entra ID Protection and Okta ThreatInsight are examples.

Example

A sign-in from a Tor exit node is flagged high risk and forced to complete MFA and a password change.

Exam tip

Risk-based auth balances security and user friction.

Related terms