Which feature should you configure to prevent users from creating passwords that contain variations of the word "contoso"?

Azure AD Password Protection allows you to define custom banned password lists, preventing users from creating passwords that include specific words, phrases, or variations thereof, such as "contoso." This feature helps enforce stronger password policies and mitigate common password-guessing attacks. Microsoft Entra Verified ID is for decentralized identity. Microsoft Entra Identity Governance manages identity lifecycle, access, and reviews. Azure AD Privileged Identity Management (PIM) manages, controls, and monitors access to important resources. Azure AD Identity Protection detects and remediates identity-based risks. These other features do not directly address the banning of specific words in user-created passwords.