An organization wants to enhance the security posture of its cloud directory. The security team needs a solution that automatically detects identity-based risks—such as anomalous sign-in behavior, atypical travel, and compromised credentials—and triggers automated remediation actions such as requiring multifactor authentication (MFA) or password changes. Which Microsoft Entra ID feature should the organization implement?

Microsoft Entra ID Protection: ### What Microsoft Entra ID Protection Is **Microsoft Entra ID Protection** is an advanced security feature in **Microsoft Entra ID** (available with P2 licensing) designed to detect, investigate, and remediate identity-based risks affecting organizational accounts. It leverages advanced machine learning algorithms and heuristic analysis across billions of authentications to identify anomalous behavior in real time. ### How It Meets the Requirements - **Automated Risk Detection**: Continuously monitors directory authentications for anomalies such as **atypical travel**, anonymous IP usage, and compromised credentials. - **Real-Time Automated Remediation**: Allows administrators to configure risk-based access policies that automatically block access, require **multifactor authentication (MFA)**, or enforce a secure password reset when a risk event occurs. - **Risk Investigation**: Offers consolidated reporting dashboards, event telemetry, and risk scores for users and sign-in attempts. ### Key Advantages and Capabilities - **User and Sign-In Risk Policies**: Enables policy enforcement based on calculated risk levels (low, medium, high). - **Threat Intelligence Integration**: Ingests threat data directly from global threat intelligence systems. - **Exportable Telemetry**: Facilitates exporting risk events to third-party tools or **Security Information and Event Management (SIEM)** solutions for comprehensive analysis. - **Seamless Zero Trust Alignment**: Enforces the Zero Trust principle of **Assume Breach** by dynamically evaluating trust on every authentication attempt. ### Why This Is Optimal **Microsoft Entra ID Protection** directly addresses identity threat detection and automated remediation. It automates response flows without manual administrative intervention, keeping accounts secure against credential-based attacks while preserving user productivity.