You have a Microsoft 365 E5 subscription. You plan to use Microsoft Entra ID Protection. You need to ensure that account passwords must be changed if account credentials are leaked. What should you…

The correct answer is A. a user risk policy. Microsoft Entra ID Protection uses risk-based policies to protect accounts. A user risk policy evaluates the likelihood that a user account has been compromised - leaked credentials (detected via Microsoft's threat intelligence feeds) directly raise the user risk level. When…

Submitted by alyssa_d· Apr 18, 2026Implement and manage Microsoft Entra identity and access

Question

You have a Microsoft 365 E5 subscription. You plan to use Microsoft Entra ID Protection. You need to ensure that account passwords must be changed if account credentials are leaked. What should you configure?

Options

Aa user risk policy
BPassword protection
Ca sign-in risk policy
Dself-service password reset (SSPR)

How the community answered

(50 responses)

A
78% (39)
B
4% (2)
C
12% (6)
D
6% (3)

Explanation

Microsoft Entra ID Protection uses risk-based policies to protect accounts. A user risk policy evaluates the likelihood that a user account has been compromised - leaked credentials (detected via Microsoft's threat intelligence feeds) directly raise the user risk level. When user risk reaches the configured threshold (e.g., High), the policy can require the user to perform a secure password change before gaining access. A sign-in risk policy responds to suspicious sign-in attempts (unfamiliar location, anonymous IP), not credential leaks. Password protection blocks weak/banned passwords. SSPR lets users reset passwords on-demand but does not enforce it automatically based on detected risk.

Topics

#Microsoft Entra ID Protection#User Risk Policy#Identity Security#Conditional Access

Community Discussion

No community discussion yet for this question.

Full MS-102 Practice