SC-100 Practice Question 3914
Exam: SC-100
Domain: Design security operations, identity, and compliance capabilities
Difficulty: medium
You are designing an identity protection architecture for an enterprise. You want to automatically force a password reset via SSPR when an account has leaked credentials discovered in public breaches. What should you configure?
Answer Options
A
Microsoft Entra Identity Protection User Risk Policy enforcing password change
B
Azure Route Table blocking outbound port 443
C
Intune remote device wipe command
D
Disabling the user corporate email account permanently
Correct Answer
A: Microsoft Entra Identity Protection User Risk Policy enforcing password change
Explanation
Configure a Microsoft Entra Identity Protection User Risk Policy that triggers a Grant control requiring MFA and a secure password change when User Risk reaches "High".