DRAG DROP -You have a Microsoft 365 subscription that uses Microsoft Defender for Office 365.You need to configure policies to meet the following requirements:Customize the common attachments filter.Enable impersonation protection for sender domains.Which type of policy should you configure for each requirement? To answer, drag the appropriate policy types to the correct requirements. Each policy type may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.NOTE: Each correct selection is worth one point.
You have an Azure AD tenant and a Microsoft 365 E5 subscription. The tenant contains the users shown in the following table.You plan to implement Microsoft Defender for Endpoint.You verify that role-based access control (RBAC) is turned on in Microsoft Defender for Endpoint.You need to identify which user can view security incidents from the Microsoft 365 Defender portal.Which user should you identify?
HOTSPOT -You have a Microsoft 365 E5 subscription.All company-owned Windows 11 devices are onboarded to Microsoft Defender for Endpoint.You need to configure Defender for Endpoint to meet the following requirements:Block a vulnerable app until the app is updated.Block an application executable based on a file hash.The solution must minimize administrative effort.What should you configure for each requirement? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point.
HOTSPOT -You have a Microsoft 365 E5 subscription that uses Microsoft Defender for Endpoint and contains the devices shown in the following table.Defender for Endpoint has the device groups shown in the following table.You create an incident email notification rule configured as shown in the following table.For each of the following statements, select Yes if the statement is true. Otherwise, select No.NOTE: Each correct selection is worth one point.
You have a Microsoft 365 tenant that contains two users named User1 and User2.You create the alert policy shown in the following exhibit.User2 runs a script that modifies a file in a Microsoft SharePoint library once every four minutes and runs for a period of two hours.How many alerts will User1 receive?
You have a Microsoft 365 E5 subscription that contains a user named User1.User1 exceeds the default daily limit of allowed email messages and is on the Restricted entities list.You need to remove User1 from the Restricted entities list.What should you use?
