Question

A security administrator at Contoso wants Microsoft Entra ID to automatically require users to securely change their password when leaked credentials are detected for their account. Which Microsoft Entra ID Protection capability should the administrator configure to achieve this?

Accepted Answer

A user risk policy that requires a secure password change when user risk is high

Answer

A sign-in risk policy that blocks access when sign-in risk is high

Answer

A Privileged Identity Management activation policy that requires approval

Answer

An access review that recertifies user account membership monthly