Your organization wants Conditional Access to force a password change whenever a user account is determined to be compromised over time based on leaked credentials and suspicious activity patterns. Which Identity Protection risk signal should the Conditional Access policy be based on to meet this specific requirement?