A company has deployed their solutions to Azure. They have users that connect to Azure AD via the Internet. They have the requirement that they are prompted to change their password if users try to login from previously unseen IP addresses. Which of the following should the company consider for this requirement?

Answer options:

A.Azure AD Connect Health
B.Azure AD Privileged Identity Management
C.Microsoft Defender for Identity (formerly Azure Advanced Threat Protection, also known as Azure ATP).
D.Azure Active Directory

Answer – C 
This article is updated frequently to let you know what`s new in the latest releases of Microsoft Defender for Identity (formerly Azure Advanced Threat Protection, also known as Azure ATP). 

https://docs.microsoft.com/en-us/defender-for-identity/release-reference

Answer – C 
This article is updated frequently to let you know what`s new in the latest releases of Microsoft Defender for Identity (formerly Azure Advanced Threat Protection, also known as Azure ATP). 
RSS feed: Get notified when this page is updated by copying and pasting the following URL into your feed reader: <code>https://docs.microsoft.com/api/search/rss?search=%22This+article+is+updated+frequently+to+let+you+know+what%27s+new+in+the+latest+release+of+Microsoft+Defender+for+Identity%22&amp;locale=en-us</code> 
Microsoft Defender for Identity (formerly Azure Advanced Threat Protection, also known as Azure ATP) is a cloud-based security solution that leverages your on-premises Active Directory signals to identify, detect, and investigate advanced threats, compromised identities, and malicious insider actions directed at your organization 
Defender for Identity enables SecOp analysts and security professionals struggling to detect advanced attacks in hybrid environments to: 

First go to User risk policy
Next go to Controls
Then based on the user sign-in risk condition, you can make the user change the password as per the policy. 

Option A is incorrect since this is used to check the health status of Azure AD Connect. 
Option B is incorrect since it is used for privileged level access in Azure. 
Option D is incorrect since this is used to create a users in Azure. 
For more information on Azure AD Identity Protection, please visit the below URL- 

https://docs.microsoft.com/en-us/azure/active-directory/identity-protection/overview