Question
What can you use to block a user account automatically when a risky sign-in is detected?
- A. Microsoft Defender for Identity
- B. Microsoft Entra ID Protection Correct
- C. Microsoft Defender for Office 365
- D. Microsoft Entra Privileged Identity Management (PIM)
Explanation
Microsoft Entra ID Protection calculates a risk level for each sign-in in real time and feeds it to risk-based Conditional Access policies, which can block access automatically when the risk level matches. Microsoft Defender for Identity detects threats against on-premises Active Directory identities, not sign-in risk policies. Microsoft Defender for Office 365 protects email and collaboration content. Privileged Identity Management controls just-in-time activation of privileged roles and does not respond to risky sign-ins.
