You have an Azure subscription linked to an Azure AD tenant licensed with Azure AD Premium P1. You plan to enable Azure AD Identity Protection so you can configure a user risk policy and a sign-in risk policy. What must you do first?
Choose an answer
Tap an option to check your answer.
Correct answer: Purchase Azure Active Directory Premium Plan 2 licenses for all users..
Why this is the answer
Azure AD Identity Protection, which includes user risk and sign-in risk policies, requires Azure Active Directory Premium P2 licenses. While Azure AD Premium P1 offers some identity protection features, the advanced risk policies are exclusive to P2. Therefore, upgrading to P2 licenses for all users is the necessary first step. Registering users for MFA is a good security practice but not a prerequisite for enabling Identity Protection itself. Enabling security defaults or enhanced security features in Microsoft Defender for Cloud are also beneficial for overall security but do not directly unlock Azure AD Identity Protection's advanced risk policies.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed