# Microsoft Entra Identity Protection

> Chapter 100 of the Courseiva AZ-900 curriculum — https://courseiva.com/learn/az-900/azure-identity-protection

**Official objective:** 2.5 — Azure Architecture Services

## Introduction

This chapter covers Microsoft Entra Identity Protection. AZ-900 tests under 2.5.

## A Risk Alert System

Like a motion sensor alerting to movement, Identity Protection detects risky sign-in patterns and compromised identities.

## Core explanation

Identity Protection detects risky sign-in patterns (unusual locations, impossible travel) and compromised credentials, enabling proactive response.

## Real-world context

A user signs in from an unusual country at an impossible speed — Identity Protection flags it as risky.

## Exam focus

Objective 2.5 expects understanding of identity risk detection.

## Step by step

1. **Enable detection** — Risk detection rules are enabled.
2. **Monitor alerts** — Risky activities are flagged.
3. **Respond** — Organizations remediate or block risky activities.

## Key takeaways

- Detects risky sign-in patterns.
- Identifies compromised identities.
- Enables proactive response.

## FAQ

**What is Microsoft Entra Identity Protection?**

It detects risky sign-in patterns and compromised identities, enabling proactive security response.

---

Interactive version with quiz and diagrams: https://courseiva.com/learn/az-900/azure-identity-protection