Topic 1 · Question 29

Risk detection and remediation
Identity Protection identifies risks of many types, including:

Anonymous IP address use
Atypical travel
Malware linked IP address
Unfamiliar sign-in properties
Leaked credentials
Password spray

Same happened to me, just realized Identity Protection existed.

Conditional access is under ID Protection

Azure AD is now Entra ID

A. Yes

Azure AD Identity Protection is a comprehensive solution that helps you protect your organization's identities and detect and respond to potential identity-related risks. One of its features is the ability to configure risk-based policies. In this case, you can set up a risk-based policy that triggers a password change prompt for users when they connect to Azure AD via the internet from an unidentified IP address. This helps enhance security by encouraging users to change their passwords in case of suspicious activity.

So, the solution of configuring Azure AD Identity Protection meets the goal of encouraging users to change passwords under specific risk conditions.

Why would it be ID protection and not conditional access policy?

I was confused as hell, thank you sir