A company wants to automatically detect sign-in attempts from anonymous IP addresses and sign-ins from unfamiliar locations. When such a risk is detected, they want to require multi-factor authentication (MFA) or block the sign-in in real time. Additionally, they need a dashboard that shows risk events and allows generating weekly risk reports. Which Microsoft Entra ID feature should they use?

Microsoft Entra ID Conditional Access

Conditional Access can enforce policies based on risk levels, but it relies on Identity Protection to detect risks first.

Microsoft Entra ID Privileged Identity Management

PIM focuses on just-in-time privileged role access and does not include sign-in risk detection.

Microsoft Entra ID Identity Governance

Identity Governance includes access reviews and entitlement management, not real-time risk detection.

What does this AZ-305 question test?

Authentication checks who the user is.

What is the correct answer to this question?

The correct answer is: Microsoft Entra ID Identity Protection — Microsoft Entra ID Identity Protection provides risk-based policies that can automatically respond to detected risks (e.g., anonymous IP, unfamiliar locations) by requiring MFA or blocking sign-in. It also includes a risk dashboard and reporting capabilities. Conditional Access can use risk signals from Identity Protection but does not detect risks itself. Privileged Identity Management and Identity Governance are not focused on sign-in risk detection.

What should I do if I get this AZ-305 question wrong?

Then try more questions from the same exam bank and focus on understanding why the wrong options are tempting.