AB-900 Certification Practice Question #16

Question

What can you use to block a user account automatically when a risky sigh-in is detected?

Accepted Answer

**Microsoft Entra ID Protection** evaluates sign-in and user risk and, through risk-based Conditional Access / risk policies, can automatically **block** or remediate a risky sign-in (block access, force MFA, or require a secure password change). Defender for Identity detects on-premises AD attacks, Defender for Office 365 handles email/collaboration threats, and PIM governs just-in-time privileged role activation — none automatically blocks an account on a risky sign-in.

More AB-900 practice questions