From the course: Microsoft 365 Administrator Expert (MS-102) Cert Prep by Microsoft Press

Unlock this course with a free trial

Join today to access over 25,200 courses taught by industry experts.

Plan for identity protection

Plan for identity protection

- Microsoft Entra ID Protection helps organization to detect, investigate, and remediate identity-based risks. Because identities are main areas that threat actors will concentrate when it comes to compromisation, because if they compromise any identity, it's easy for them to access our resources and do whatever the bad things that they want to do with their bad intentions. So then these identity-based risks can be further fed into rules like conditional access to make access decisions or fed back to secure information and event management SIEM solutions for further investigation and correlation. For example, when you are accessing Microsoft 365 Azure resource, the location database information are logged. And then if you are accessing from different device, these information are collected too. So that I demonstrated during previous lesson through sign-in logs and audit logs. So then if you look at sign-in logs, it…

Contents