nerdexam
Microsoft

AZ-900 · Question #17

You need to ensure that when Azure Active Directory (Azure AD) users connect to Azure AD from the Internet by using an anonymous IP address, the users are prompted automatically to change their passwo

The correct answer is D. Azure AD Identity Protection. Azure AD Identity Protection includes two risk policies: sign-in risk policy and user risk policy. A sign-in risk represents the probability that a given authentication request isn't authorized by the There are several types of risk detection. One of them is Anonymous IP Address.

Submitted by helene.fr· Mar 5, 2026Describe Azure management and governance

Question

You need to ensure that when Azure Active Directory (Azure AD) users connect to Azure AD from the Internet by using an anonymous IP address, the users are prompted automatically to change their password. Which Azure service should you use?

Options

  • AAzure AD Connect Health
  • BAzure AD Privileged Identity Management
  • CAzure Advanced Threat Protection (ATP)
  • DAzure AD Identity Protection

How the community answered

(46 responses)
  • A
    4% (2)
  • B
    7% (3)
  • C
    13% (6)
  • D
    76% (35)

Explanation

Azure AD Identity Protection includes two risk policies: sign-in risk policy and user risk policy. A sign-in risk represents the probability that a given authentication request isn't authorized by the There are several types of risk detection. One of them is Anonymous IP Address. This risk detection type indicates sign-ins from an anonymous IP address (for example, Tor browser or anonymous VPN). These IP addresses are typically used by actors who want to hide their login telemetry (IP address, location, device, etc.) for potentially malicious intent. You can configure the sign-in risk policy to require that users change their password. https://docs.microsoft.com/en-us/azure/active-directory/identity-protection/howto-sign-in-risk- https://docs.microsoft.com/en-us/azure/active-directory/identity-protection/concept-identity- protection-risks

Community Discussion

No community discussion yet for this question.

Full AZ-900 Practice