nerdexam
Microsoft

MS-102 · Question #91

You have a Microsoft 365 ES subscription. On Monday, you create a new user named User1. On Tuesday, User1 signs in for the first time and perform the following actions: - Signs in to Microsoft…

The correct answer is B. anonymous IP address only. Atypical travel and Unfamiliar sign-in properties have learning period. The system has an initial learning period of the earliest of 14 days or 10 logins, during which it learns a new user's sign-in behavior.

Submitted by thandi_sa· Apr 18, 2026Implement and manage Microsoft Entra identity and access

Question

You have a Microsoft 365 ES subscription. On Monday, you create a new user named User1. On Tuesday, User1 signs in for the first time and perform the following actions:

  • Signs in to Microsoft Exchange Online from an anonymous IP address.
  • Signs in to Microsoft SharePoint Online from a device in New York

City.

  • Establishes Remote Desktop connections to hosts in Berlin and Hong

Kong, and then signs in to SharePoint Online from the Remote Desktop connections. Which types of sign-in risks will Azure AD Identity Protection detect for User1?

Options

  • Aanonymous IP address and atypical travel only
  • Banonymous IP address only
  • Cunfamiliar sign-in properties and atypical travel only
  • Danonymous IP address and unfamiliar sign-in properties only
  • Eanonymous IP address, atypical travel, and unfamiliar sign-in properties

How the community answered

(22 responses)
  • B
    77% (17)
  • C
    5% (1)
  • D
    5% (1)
  • E
    14% (3)

Explanation

Atypical travel and Unfamiliar sign-in properties have learning period. The system has an initial learning period of the earliest of 14 days or 10 logins, during which it learns a new user's sign-in behavior.

Topics

#Azure AD Identity Protection#Sign-in risk detection#Microsoft Entra ID#User identity security

Community Discussion

No community discussion yet for this question.

Full MS-102 Practice