A company uses Microsoft Entra ID (Microsoft Entra ID) for identity management. They want to automatically detect sign-in risks such as sign-ins from unfamiliar locations, anonymous IP addresses, or leaked credentials. Based on the risk level, they want to apply different controls: for low-risk sign-ins, show a message but allow access; for medium-risk sign-ins, require multi-factor authentication (MFA); for high-risk sign-ins, block the sign-in. They also need to receive a weekly summary report of risk events. Which Microsoft Entra ID feature should they configure?

Microsoft Entra ID Identity Protection policies

Identity Protection provides risk detection and a risk-based conditional access policy (user risk and sign-in risk) but the actual enforcement (block, MFA) requires Conditional Access policies. Identity Protection alone does not enforce access controls.

Microsoft Entra ID Access Reviews

Access Reviews are used to periodically review group memberships or application access, not to detect and respond to sign-in risks in real time.

Microsoft Entra ID Privileged Identity Management (PIM)

PIM manages just-in-time privileged role activation and does not provide detection or response to sign-in risks.

What does this AZ-305 question test?

Authentication checks who the user is.

What is the correct answer to this question?

The correct answer is: Microsoft Entra ID Conditional Access policies with sign-in risk conditions — Microsoft Entra ID Conditional Access policies can use sign-in risk from Identity Protection as a condition. You can create three separate policies targeting different risk levels: low, medium, high. Each policy can apply different access controls (e.g., block, require MFA, or only report). Identity Protection itself provides reports and dashboards but does not block or require MFA on its own; it needs Conditional Access to enforce actions. Access Reviews and Privileged Identity Management do not address sign-in risk controls.

What should I do if I get this AZ-305 question wrong?

Then try more questions from the same exam bank and focus on understanding why the wrong options are tempting.