1. If User1 signs in from an unfamiliar location, he must change his password.
• Yes. User1 is a member of Group1, which is included in the policy's assignment. If User1 signs in from an unfamiliar location, it meets the condition of a Medium or above sign-in risk. According to the policy's access settings, User1 must change his password.
2. If User2 signs in from an anonymous IP address, she must change her password.
• No. User2 is a member of Group1 and Group2, but Group2 is excluded from the policy's assignment. Therefore, the policy does not apply to User2. Even if User2 signs in from an anonymous IP address, it won't trigger the password change requirement.
3. If User3 signs in from a computer containing malware that is communicating with known bot servers, he must change his password.
• No. Although User3 is a member of Group1 and meets the sign-in risk condition, the policy's access settings do not require a password change. The policy allows access without mandating a password change.
Based on the evaluation, the correct answers are:
1. Yes
2. No
3. No...