Cert EspressoLearn. Practise. Find your flow.

A LITTLE FOCUS.
A BIG NEXT STEP.

Your pace. Your space.
Microsoft · SC-300

Microsoft Entra ID Protection

SC-300 · Lesson 8 of 16 · 55:54

YouTube loads only after you press play. This chapter opens at its timestamp in the full course. Watch on YouTube ↗

In this lesson

Prepare for the SC-300 exam (Microsoft Identity and Access Administrator). In this lesson: sign-in risk and user risk, risk-based Conditional Access policies with P2, requiring risk remediation, the MFA registration policy and registration campaigns, investigating with the risky users, risky sign-ins and risk detections reports, confirming or dismissing risk, and risky workload identities. Includes three original practice questions.

Preview the topics
  • A company uses passkeys, so most users have no password. When their user risk is high, they should fix it themselves. Which control fits best?
  • An analyst finds that a user’s account was really taken over, and wants the risk policies to treat it that way. What should the analyst do?
  • An app’s client secret shows up in a public code repository, and you want Conditional Access to block that service principal when its risk is high. What do you need?