Which service helps identify risky sign-ins and threats across Azure tenants?

Azure AD Identity Protection is the correct answer because it proactively detects, remediates, and reports identity-based risks. It identifies vulnerabilities like risky sign-ins, compromised credentials, and unusual behavior patterns across Azure AD tenants, helping to protect user identities. Azure Bastion provides secure and seamless RDP/SSH connectivity to your virtual machines directly through the Azure portal, not identity threat detection. Azure Advisor provides recommendations for optimizing Azure resources for cost, performance, reliability, and security, but it doesn't specifically focus on real-time identity threat detection. Microsoft Defender for Cloud offers comprehensive cloud security posture management and threat protection across hybrid and multi-cloud environments, but Azure AD Identity Protection is the specialized service for identity-specific risks within Azure AD.