Azure AD Identity Protection

Question 1

Azure AD Identity Protection policies

Answer 1

1. User-risk policy: can be used to define what happens when identity protection determines what an account may be compromised. Allows you to require password reset for allow access.
2. Sign-in risk policy: allows you to enforce organizational requirements based on the risk score that indentity protection calculates for a particular sign-in. Allows you to require MFA with all access.
3. MFA registration policy: allows you to force users to register for MFA
   -This is the simplier version of AD Conditional Access
   -You can set up alerts and reports of those policies
   -P2 feature!
   -Works for users and service principals

Question 2

Azure AD Identity Protection permissions needed to access

Answer 2

-Security reader
-Security operator
-security administrator
-Global reader
-Global Administrator