Unit 1: Introduction to Identity Protection

Identity Protection continuously monitors:

• User sign-in behavior.
• Authentication patterns.
• Signals indicating compromise.

Its goal is to detect abnormal behavior early, reduce attacker dwell time, and allow fast remediation.

Think of Identity Protection as a risk analysis engine, while Conditional Access is the enforcement engine.