A company deploys Microsoft Azure AD. You run the Identity Secure Score report. The report displays five security items. Which three security items on the report have the most impact on the score? Eac

Blocking legacy authentication is a high-impact action because legacy protocols like POP, IMAP, and SMTP cannot enforce MFA, making them a major attack vector that significantly weakens overall identity security.

Enabling user risk policy is an important security measure but has a lower impact score compared to the three correct answers in Microsoft's Identity Secure Score ranking.

Requiring multi-factor authentication for all users is one of the highest-impact security improvements because it directly mitigates credential-based attacks, which account for the majority of identity compromises.

Deleting or blocking unused accounts is a good security hygiene practice but carries a lower impact weight in the Identity Secure Score compared to blocking legacy auth, enforcing MFA, and eliminating password expiration.

Not expiring passwords aligns with modern NIST guidelines and Microsoft's recommendations, as forced password expiration leads to weaker passwords and predictable patterns, reducing overall security posture.