ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 36 - MS-102 discussion

Report
Export

Which report should the New York office auditors view?

A.

DLP policy matches

Answers
A.

DLP policy matches

B.

DLP false positives and overrides

Answers
B.

DLP false positives and overrides

C.

DLP incidents

Answers
C.

DLP incidents

D.

Top Senders and Recipients

Answers
D.

Top Senders and Recipients

Suggested answer: C

Explanation:

https://docs.microsoft.com/en-us/office365/securitycompliance/data-loss-prevention-policies

This report also shows policy matches over time, like the policy matches report. However, the policy matches report shows matches at a rule level; for example, if an email matched three different rules, the policy matches report shows three different line items. By contrast, the incidents report shows matches at an item level; for example, if an email matched three different rules, the incidents report shows a single line item for that piece of content. Because the report counts are aggregated differently, the policy matches report is better for identifying matches with specific rules and fine tuning DLP policies. The incidents report is better for identifying specific pieces of content that are problematic for your DLP policies.

asked 05/10/2024
Meghan Crofford
39 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first