ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 240 - MS-102 discussion

Report
Export

You have a new Microsoft 365 E5 tenant.

You need to enable an alert policy that will be triggered when an elevation of Microsoft Exchange Online administrative privileges is detected.

What should you do first?

A.

Enable auditing.

Answers
A.

Enable auditing.

B.

Enable Microsoft 365 usage analytics.

Answers
B.

Enable Microsoft 365 usage analytics.

C.

Create an Insider risk management policy.

Answers
C.

Create an Insider risk management policy.

D.

Create a communication compliance policy.

Answers
D.

Create a communication compliance policy.

Suggested answer: A

Explanation:

Microsoft Purview auditing solutions provide an integrated solution to help organizations effectively respond to security events, forensic investigations, internal investigations, and compliance obligations. Thousands of user and admin operations performed in dozens of Microsoft 365 services and solutions are captured, recorded, and retained in your organization's unified audit log. Audit records for these events are searchable by security ops, IT admins, insider risk teams, and compliance and legal investigators in your organization. This capability provides visibility into the activities performed across your Microsoft 365 organization.

Note: Permissions alert policies

Example: Elevation of Exchange admin privilege

Generates an alert when someone is assigned administrative permissions in your Exchange Online organization. For example, when a user is added to the Organization Management role group in Exchange Online.

https://learn.microsoft.com/en-us/microsoft-365/compliance/audit-solutions-overview

https://learn.microsoft.com/en-us/microsoft-365/compliance/alert-policies

asked 05/10/2024
nico farina
38 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first