Exam MS-101 topic 1 question 26 discussion

A. as the texts match the user message for Risky Sign-in https://docs.microsoft.com/en-us/azure/active-directory/identity-protection/concept-identity-protection-user-experience

yes its A https://learn.microsoft.com/en-us/answers/questions/772956/we-have-detected-something-unusual-about-this-sign

We've detected something unusual about this sign-in. --> This is the key. Conditional access does not telling you this. Conditional access works as you requested. However, Identity protection listens for signs. In this case something changed, new location, device, app etc. (also in the question) triggering more caution and require another verifications.

This is a terrible question as both A and B are correct. Risky Sign in can be configured from both policies. https://learn.microsoft.com/en-us/azure/active-directory/conditional-access/howto-conditional-access-policy-risk

A - this is substantiated by link provided by BGM-YKA

A la, sohai

https://docs.microsoft.com/en-us/azure/active-directory/identity-protection/concept-identity-protection-user-experience

See BGM_YKA

https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/overview Common signals that Conditional Access can take in to account when making a policy decision include the following signals: ... Real-time and calculated risk detection Signals integration with Azure AD Identity Protection allows Conditional Access policies to identify risky sign-in behavior. Policies can then force users to change their password, do multi-factor authentication to reduce their risk level, or block access until an administrator takes manual action.

(A) all the way. Admins please for fix this. Thank you

https://docs.microsoft.com/en-us/azure/active-directory/identity-protection/concept-identity-protection-user-experience#risky-sign-in-remediation

This is A for sure. Azure Identity Protection detects a risky sign-in.

sign in risk policy

https://techcommunity.microsoft.com/t5/itops-talk-blog/what-s-the-difference-between-azure-active-directory-identity/ba-p/1320887

Answer is A. Look at the screenshot here for identity protection. It has the exact wording. This is not conditional access. https://docs.microsoft.com/en-us/azure/active-directory/identity-protection/concept-identity-protection-user-experience#risky-sign-in-self-remediation

Tasted the right answer is B

https://evertoncollins.com/azure-identity-protection-enterprise-mobility-security/