nerdexam
Microsoft

MS-102 · Question #306

You have a Microsoft 365 E5 subscription. You create the users shown in the following table. You plan to use Microsoft Entra ID Protection. Which users will be added automatically to the User at…

The correct answer is D. Admin1 and Admin3 only. Microsoft Entra ID Protection excludes accounts holding the Global Administrator role from user risk detection and alerts by default, as a risk event against a global admin is handled through separate privileged identity workflows. Based on the table (not shown here), Admin2…

Submitted by fatima_kr· Apr 18, 2026Implement and manage Microsoft Entra identity and access

Question

You have a Microsoft 365 E5 subscription. You create the users shown in the following table. You plan to use Microsoft Entra ID Protection. Which users will be added automatically to the User at risk detected alerts list?

Options

  • AAdmin1 only
  • BAdmin2 only
  • CAdmin1 and Admin2 only
  • DAdmin1 and Admin3 only
  • EAdmin1, Admin2, and Admin3

How the community answered

(26 responses)
  • A
    4% (1)
  • B
    8% (2)
  • C
    12% (3)
  • D
    77% (20)

Explanation

Microsoft Entra ID Protection excludes accounts holding the Global Administrator role from user risk detection and alerts by default, as a risk event against a global admin is handled through separate privileged identity workflows. Based on the table (not shown here), Admin2 holds the Global Administrator role, which exempts them from the 'User at risk detected' alerts list. Admin1 and Admin3 hold lower-privileged roles and are subject to normal risk detection, so they are automatically added to the alerts list when a risk is detected.

Topics

#Microsoft Entra ID Protection#Risk detection#Licensing#Microsoft 365 E5

Community Discussion

No community discussion yet for this question.

Full MS-102 Practice