What are impossible travel risk signals?

• A. Risk signals from login location anomalies; trigger MFA or challenge.
• B. Travel schedule conflicts that delay login.
• C. GPS location matching that is always correct.
• D. Device type mismatch with user role.

Answer: (A)

Impossible travel risk signals show up when a login occurs from a location that would require impossible travel time from where the user logged in before. In other words, the system detects a suspicious jump in location between sessions, suggesting the account may be used by someone else. That’s precisely what a risk signal from login location anomalies captures, and the typical response is to require stronger verification like MFA or an additional challenge.

Other options don’t fit because travel schedule conflicts aren’t an authentication risk signal, GPS being always correct would eliminate anomalies rather than flag them, and a device-type mismatch with user role is about what device is used rather than where the login occurred.