Exam SC-900 topic 1 question 52 discussion

Directly from the SC-900 Fundamentals training slides: Azure Identity Protection Enables organizations to accomplish three key tasks: • Automate the detection and remediation of identity based risks. • Investigate risks using data in the portal. • Export risk detection data to third party utilities for further analysis.

As other have said, sensitivity labels have nothing to do with it.

It is CDE: Microsoft Entra ID Protection helps organizations detect, investigate, and remediate identity-based risks. These identity-based risks can be further fed into tools like Conditional Access to make access decisions or fed back to a security information and event management (SIEM) tool for further investigation and correlation. The tools that are written down here are available from Microsoft, so not third parties. Ref:https://learn.microsoft.com/en-us/entra/id-protection/overview-identity-protection

B. Export risk detection to third-party utilities. Most Voted C. Automate the detection and remediation of identity based-risks. Most Voted D. Investigate risks that relate to user authentication. Most Voted

Selected Answer: BCD

Correct Ans are B. Export risk detection to third-party utilities. C. Automate the detection and remediation of identity based-risks. D. Investigate risks that relate to user authentication.

Answer should be BCD

correct answer is BCD. I verified with the provided link from the guys here.

Automate the detection and remediation of identity-based risks. Investigate risks using data in the portal. Export risk detection data to other tools.

correct

BCD is the answer. https://learn.microsoft.com/en-us/azure/active-directory/identity-protection/overview-identity-protection Identity Protection allows organizations to accomplish three key tasks: - Automate the detection and remediation of identity-based risks. - Investigate risks using data in the portal. - Export risk detection data to other tools.

THE answers are here https://docs.microsoft.com/en-us/azure/active-directory/identity-protection/overview-identity-protection

its CDE: C. Automate the detection and remediation of identity-based risks. D. Investigate risks that relate to user authentication. E. Create and automatically assign sensitivity labels to data. A. Azure AD Identity Protection is not used to configure external access for partner organizations. This task is typically performed using Azure AD B2B collaboration. B. Azure AD Identity Protection does not export risk detection to third-party utilities. It provides built-in reports and notifications for risk detections. C. Azure AD Identity Protection can automate the detection and remediation of identity-based risks by using its machine learning algorithms to detect risky sign-ins and user behavior. It can also take remedial actions such as blocking access or requiring additional authentication. D. Azure AD Identity Protection allows investigating risks that relate to user authentication. It provides detailed reports and recommendations for remediation. E. Azure AD Identity Protection does not create and automatically assign sensitivity labels to data. This task is typically performed using Azure Information Protection.

E is compliance and has nothing to do with Azure Identity Protection

Is BCD. E is incorrect.

100% sure that is BCD

BCD is definitely correct.