DRAG DROP -You have a Microsoft 365 E5 subscription. All users use Microsoft Exchange Online.Microsoft 365 is configured to use the default policy settings without any custom rules.You manage message hygiene.Where are suspicious email messages placed by default? To answer, drag the appropriate location to the correct message types. Each option may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.Select and Place:
You have a Microsoft 365 subscription.You create a Microsoft Defender for Office 365 safe attachments policy.You need to configure the retention duration for the attachments in quarantine.Which type of threat management policy should you create?
Your company has 500 computers.You plan to protect the computers by using Microsoft Defender for Endpoint. Twenty of the computers belong to company executives.You need to recommend a remediation solution that meets the following requirements:✑ Microsoft Defender for Endpoint administrators must manually approve all remediation for the executives✑ Remediation must occur automatically for all other usersWhat should you recommend doing from Microsoft Defender Security Center?
You have a Microsoft 365 Enterprise E5 subscription.You use Microsoft Defender for Endpoint.You need to integrate Microsoft Defender for Office 365 and Microsoft Defender for Endpoint.Where should you configure the integration?
Your network contains an on-premises Active Directory domain. The domain contains servers that run Windows Server and have advanced auditing enabled.The security logs of the servers are collected by using a third-party SIEM solution.You purchase a Microsoft 365 subscription and plan to deploy Microsoft Defender for Identity by using standalone sensors.You need to ensure that you can detect when sensitive groups are modified and when malicious services are created.What should you do?
You have several Conditional Access policies that block noncompliant devices from connecting to services.You need to identify which devices are blocked by which policies.What should you use?
