Which level should you identify for each risk event?

DRAG DROP

You are implementing conditional access policies. You must evaluate the existing Azure Active Directory (Azure AD) risk events and risk levels to configure and implement the policies.

You need to identify the risk level of the following risk events:

– Users with leaked credentials

– Impossible travel to atypical locations

– Sign ins from IP addresses with suspicious activity

Which level should you identify for each risk event? To answer, drag the appropriate levels to the correct risk events. Each level may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point.

View Answer

Answer:

Explanation:

Azure AD Identity protection can detect six types of suspicious sign-in activities:

– Users with leaked credentials

– Sign-ins from anonymous IP addresses

– Impossible travel to atypical locations

– from infected devices

– from IP addresses with suspicious activity

– from unfamiliar locations

These six types of events are categorized in to 3 levels of risks C High, Medium & Low:

References:

http://www.rebeladmin.com/2018/09/step-step-guide-configure-risk-based-azure-conditional-access­policies/