A company uses Microsoft Entra ID (Microsoft Entra ID). They want to automatically detect and respond to high-risk sign-in events, such as sign-ins from malware-linked IP addresses or leaked credentials. When such risks are detected, they want to require multi-factor authentication (MFA) or block the sign-in. They also need a dashboard to review risk events and generate reports. Which Microsoft Entra ID feature should they configure?

Microsoft Entra ID Privileged Identity Management (PIM)

PIM manages just-in-time access to privileged roles, not risk detection or response for sign-in events.

Microsoft Entra ID Conditional Access

Conditional Access enforces access conditions based on signals, including risk from Identity Protection, but it does not itself detect or report on risk. Identity Protection is needed for detection and dashboard.

Microsoft Entra ID Identity Governance

Identity Governance handles access reviews, entitlement management, and lifecycle, not real-time risk detection.

What does this AZ-305 question test?

Authentication checks who the user is.

What is the correct answer to this question?

The correct answer is: Microsoft Entra ID Identity Protection — Microsoft Entra ID Identity Protection provides risk-based policies that can automatically detect and remediate identity risks. It includes a dashboard for reviewing risk events and generating reports. Conditional Access can enforce policies based on risk but relies on Identity Protection for the risk detection. Privileged Identity Management focuses on privileged roles. Identity Governance deals with access reviews and entitlement management.

What should I do if I get this AZ-305 question wrong?

Then try more questions from the same exam bank and focus on understanding why the wrong options are tempting.