SC-300 Certification Practice Question #122

Question

You have an Azure Active Directory (Azure AD) tenant.

You open the risk detections report.

Which risk detection type is classified as a user risk?

Accepted Answer

The risk detections report classifies detections as either sign-in risk or user risk. MS Learn's "Risk detection types and levels" / "What are risk detections?" tables list impossible travel, anonymous IP address, and malicious IP address as sign-in risk detections (they describe the probability a given authentication is not the legitimate owner). Microsoft Entra (Azure AD) threat intelligence is the one option in this set that contributes to the user risk score, making D the user-risk classification. The unanimous Most Voted D, the official Suggested Answer D, and a community comment explicitly noting A/B/C are sign-in detections all align with the documentation.

More SC-300 practice questions