An enterprise is adopting a Zero Trust security model across its cloud infrastructure to protect corporate resources. The security team needs a solution that continuously detects identity-related risks, flags suspicious sign-in activities, and automatically enforces risk-based policies to respond to detected threats. Which identity feature should the enterprise implement?

Microsoft Entra ID Protection: ### What Microsoft Entra ID Protection Is **Microsoft Entra ID Protection** is an identity security tool that allows organizations to detect, investigate, and remediate identity-based risks. It provides automated detection of suspicious events—such as unfamiliar sign-in properties, atypical travel, and compromised credentials—and assigns real-time risk levels to users and sign-in sessions. ### How It Meets the Zero Trust Requirements - **Continuous Risk Detection**: Actively monitors identity signals across sign-in attempts and flags emerging risks on a central dashboard. - **Automated Policy Enforcement**: Allows administrators to configure risk-based access policies that automatically require **Multi-Factor Authentication (MFA)**, trigger password resets, or block access when a specified risk threshold (low, medium, or high) is reached. - **Zero Trust Alignment**: Directly implements the core Zero Trust principle of **Verify Explicitly** by evaluating dynamic risk signals before granting access. ### Key Advantages and Capabilities - **Automated Threat Remediation**: Mitigates compromised accounts without requiring immediate manual intervention by security teams. - **Risk-Based Conditional Access**: Integrates directly with Conditional Access to provide contextual security policies. - **Email Summaries and Dashboards**: Provides security administrators with daily notifications and comprehensive reporting for incident response. - **Heuristic and Machine Learning Signals**: Leverages vast threat intelligence to identify anomalous user behavior. ### Why This Is Optimal Microsoft Entra ID Protection is specifically built to defend the identity layer by assessing risk and automating responses, making it the most direct and effective mechanism for enforcing identity security policies within a Zero Trust architecture.