Exam MS-900 topic 1 question 237 discussion

The correct answer for the option Secure Members of the Global Administrators group by using dynamic risk profiles, isn’t Microsoft Azure AD Privilege Identity Management? And the correct answer for the option Secure administrative roles by requiring approval, isn´t Microsoft Azure AD Identity Protection?

https://docs.microsoft.com/en-us/exchange/clients-and-mobile-in-exchange-online/outlook-for-ios-and-android/secure-outlook-for-ios-and-android: "ensures that apps are protected with a PIN" "introduces advanced data protection mechanisms, enhanced PIN configuration, and APP Mobile Threat Defense" https://docs.microsoft.com/en-us/azure/active-directory/identity-protection/overview-identity-protection Azure AD Identity Protection for securing members by risk https://docs.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-configure: "Organizations want to minimize the number of people who have access to secure information or resources" Azure AD Privileged Identity Management to secure administrative roles Answer is correct

The tricky part about the second oneis thatyou use conditional access to configure user risk but this feature of CA comes under Identity protection so my take on this, the feature is Identity Protection and CA is the tool

Question #25 says the use of dynamic risk profiles makes it privileged identity protection. Would love some clarity.

2nd is CA https://learn.microsoft.com/en-us/azure/active-directory/identity-protection/howto-identity-protection-configure-risk-policies and https://learn.microsoft.com/en-us/azure/active-directory/conditional-access/howto-conditional-access-policy-risk

first part of the question didn't state it was for iOS and android devices?