When configuring Conditional Access risk policies, which risk level should be assigned for users with leaked credentials?

For users with leaked credentials, a "High" risk level should be assigned in Conditional Access risk policies. This is because leaked credentials represent a significant security threat, as they could allow unauthorized access to the user's account and associated resources. Azure AD Identity Protection detects leaked credentials and flags them as a high-risk event, necessitating immediate action such as requiring a password change or blocking access. Assigning "None," "Low," or "Medium" would underestimate the severity of the threat and fail to trigger appropriate protective measures, leaving the organization vulnerable to compromise.