Exam SC-300 topic 2 question 112 discussion

Agree with others, answer D: Let's classify each of the risk detection types: Sign-in Risk: A. Password spray: This is considered a sign-in risk. It involves multiple attempts to sign in using common passwords, indicating a potential attack. B. Anonymous IP address: This is also a sign-in risk. It indicates that the sign-in attempt is coming from an IP address that is anonymized, which can be suspicious. C. Unfamiliar sign-in properties: This is a sign-in risk as well. It indicates that the sign-in attempt is coming from an unusual location or device for the user. User Risk: Microsoft Entra threat intelligence: This is classified as a user risk. It indicates that there is suspicious or anomalous activity related to the user account.

REPEATED!

Correct Answer: ✅ D. Microsoft Entra threat intelligence Explanation: Risk detections in Microsoft Entra ID are classified into two main categories: User risk – Indicates that the user's credentials might be compromised. Sign-in risk – Indicates that a specific sign-in attempt might be suspicious. Among the options provided, Microsoft Entra threat intelligence is classified as a user risk because it detects compromised accounts based on data from internal and external security sources.