A county help desk sees repeated sign-in failures and stolen-password reports against municipal accounts. Which approach best matches how Microsoft 365 addresses common identity compromise threats at fundamentals depth?

Common identity threats such as compromised passwords are addressed in Microsoft 365 with Microsoft Entra ID protections—especially multi-factor authentication—and with Microsoft Defender for Identity for identity-oriented detection. MS-900 expects candidates to map identity compromise to those identity and Defender-for-Identity narratives rather than to unrelated collaboration or network-only controls.