Your company purchases Microsoft 365 Enterprise and Azure AD P2 licenses. You need to provide identity protection against malicious login attempts. What should you implement?

Azure AD Identity Protection is specifically designed to detect identity-based risks, including malicious login attempts, suspicious sign-in behavior, and leaked credentials. It uses Microsoft's threat intelligence and machine learning to automatically detect risk events and allows administrators to configure risk-based Conditional Access policies to remediate threats. This feature requires Azure AD P2 licensing, which the company already possesses.

Azure AD Privileged Identity Management (PIM) manages, controls, and monitors access to privileged roles within Azure AD and Azure resources, but does not provide protection against malicious login attempts or identity risk detection.

Azure Information Protection (AIP) is a cloud-based solution for classifying, labeling, and protecting documents and emails based on sensitivity, and has no functionality related to detecting or blocking malicious authentication attempts.

Azure Identity and Access Management is a broad conceptual framework and set of capabilities built into Azure AD rather than a specific, discrete service; it does not specifically address identity threat detection and protection against malicious logins as a standalone feature.