Exam AZ-900 topic 1 question 249 discussion

guys, can you please comment only if you think an answer is wrong and why? reading 20 comments of people saying correct doesn't help at all and you always open it. let's put the comments to the minimum pls

Both are correct. Sources: 1. https://docs.microsoft.com/en-us/azure-advanced-threat-protection/atp-architecture 2. https://docs.microsoft.com/en-us/azure/active-directory/identity-protection/overview-identity-protection

"Azure ATP" and "Azure AD Identity Protection" is the answer. https://learn.microsoft.com/en-us/defender-for-identity/what-is Microsoft Defender for Identity (formerly Azure Advanced Threat Protection, also known as Azure ATP) is a cloud-based security solution that leverages your on-premises Active Directory signals to identify, detect, and investigate advanced threats, compromised identities, and malicious insider actions directed at your organization. https://learn.microsoft.com/en-us/azure/active-directory/identity-protection/concept-identity-protection-policies#azure-ad-mfa-registration-policy Identity Protection can help organizations roll out Azure AD multifactor authentication (MFA) using a policy requiring registration at sign-in. Enabling this policy is a great way to ensure new users in your organization have registered for MFA on their first day. Multifactor authentication is one of the self-remediation methods for risk events within Identity Protection. Self-remediation allows your users to take action on their own to reduce helpdesk call volume.

Given answer is correct

Second one is INCORRECT. Identity protection does provide the info if something is risky or suspicious but alone it doesn't has anything to enforce. Conditional Access use that signal but conditional acces itself fall under Azure Security Center and NOT Identity Protection. Saying to after managing conditional access policies for years https://docs.microsoft.com/en-us/azure/active-directory/identity-protection/overview-identity-protection

FYI - apparently ATP has been renamed "Microsoft Defender for Identity" - no idea if the term on the exam has been changed, but be aware "Microsoft Defender for Identity (formerly Azure Advanced Threat Protection, also known as Azure ATP)" https://docs.microsoft.com/en-us/defender-for-identity/what-is

Keywords are Threat Protection and MFA

It's correct

correct answer!!

The answer displayed is correct

Be asked in the 11.11.2021 exam!

CORRECT

correct

Correct answer

what is the difference between security center and AATP? both says threat protection... confused...

"Microsoft Defender for Identity (formerly Azure Advanced Threat Protection, also known as Azure ATP) is a cloud-based security solution that leverages your on-premises Active Directory signals to identify, detect, and investigate advanced threats, compromised identities, and malicious insider actions directed at your organization." -- The questions does not mention anything about "on-premise"?

correct