Ensure Secure Access to Azure AD via the Internet: Password Change Prompt | Microsoft Azure

Azure AD Identity Protection

Question

Note: This question is part of a series of questions that present the same scenario.

Each question in the series contains a unique solution that might meet the stated goals.

Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it.

As a result, these questions will not appear in the review screen.

Your company has an Azure Active Directory (Azure AD) environment.

Users occasionally connect to Azure AD via the Internet.

You need to ensure that users who connect to Azure AD via the internet using an unidentified IP address, are automatically instructed to change their passwords.

Solution: You configure the use of Azure AD Identity Protection.

Does the solution meet the goal?

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B.

A.

https://docs.microsoft.com/en-us/azure/active-directory/identity-protection/howto-sign-in-risk-policy

Yes, the solution meets the goal.

Azure AD Identity Protection is a security feature that helps detect and prevent identity-related risks by analyzing user activities and sign-ins to Azure AD. It also provides remediation options to mitigate the risks.

In this scenario, the goal is to ensure that users who connect to Azure AD via the Internet using an unidentified IP address are instructed to change their passwords. Azure AD Identity Protection can help achieve this goal by detecting such risky sign-ins and enforcing password change policies for those users.

To configure this solution, you can follow these steps:

  1. Enable Azure AD Identity Protection for your Azure AD tenant.
  2. Configure risk-based conditional access policies in Azure AD Identity Protection. This can include setting a policy to require a password change for users who sign in from an unidentified IP address.
  3. Enable user risk and sign-in risk policies in Azure AD Identity Protection to detect risky sign-ins.
  4. Configure notifications and remediation actions, such as sending an email to the user instructing them to change their password.

By implementing these steps, users who connect to Azure AD via the internet using an unidentified IP address will be automatically instructed to change their passwords, thereby meeting the goal of the scenario.