What does the user risk score enable a user to do?

A user risk score is an adaptive signal used to tune security policy around individual user exposure. It does not by itself prove compromise, but it helps administrators identify risky users and apply stronger monitoring, access restrictions, or control requirements. Option C (Configure stronger user-specific policies to monitor & control user-level risk exposure) is correct because the value of the score is operational: it supports stronger user-specific policies and risk-based monitoring.

Why the other options are incorrect:

A. Compare the user risk score with other companies to evaluate users vs other companies: Benchmarking users against other companies would be an executive comparison metric. User risk score is used inside the tenant to tune user-level controls.

B. Determine whether or not a user is authorized to view unencrypted data: Access to unencrypted data is a data-handling and policy decision. User risk score measures user exposure and behavior risk; it is not a decryption authorization switch.

D. Determine if a user has been compromised: A high user risk score can indicate suspicious behavior, but it is not a definitive compromise verdict. Administrators use it to strengthen monitoring and policy first.