How can a Microsoft "unsuccessful sign-in" trigger a 2FA request?

I was certain I’d find a question asking this, but a search didn’t return any results.
I have 2FA enabled on my Microsoft account, which requires me to approve all sign-ins using the Microsoft Authenticator app. My understanding is, after … Continue reading How can a Microsoft "unsuccessful sign-in" trigger a 2FA request?