2.4. Describe the identity protection and governance capabilities of Azure AD