AZ-900 Practice Question 70: Entra ID License Tiers
Microsoft Azure Fundamentals (AZ-900) · Test 7 · question 10 of 10
A security architect must recommend the minimum Microsoft Entra ID license edition that supports both Conditional Access policies and risk-based Identity Protection sign-in policies in the same tenant. Which edition meets both requirements?
Show answer and explanation
Answer:
Conditional Access "requires Microsoft Entra ID P1 licenses," but risk-based Conditional Access policies specifically "require access to Microsoft Entra ID Protection, which is a Microsoft Entra ID P2 feature." Since Entra ID P2 is the higher tier and includes the P1 feature set, it is the minimum edition that satisfies both requirements together.
Options A and D are wrong because the Free edition offers only security defaults (a single, Microsoft-managed, all-or-nothing baseline of sign-in rules) with no Conditional Access policies and no Identity Protection risk detections at all. Option C is wrong because P1 unlocks Conditional Access on its own, but risk-based policies depend on Identity Protection, which P1 does not include; P1 alone doesn't satisfy both stated requirements.
Reference: Microsoft Entra licensing