You are configuring Microsoft Cloud App Security.
You have a custom threat detection policy based on the IP address ranges of your companyâ€™s United States-based offices.
You receive many alerts related to impossible travel and sign-ins from risky IP addresses.
You determine that 99% of the alerts are legitimate sign-ins from your corporate offices.
You need to prevent alerts for legitimate sign-ins from known locations.
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

Question

You are configuring Microsoft Cloud App Security.

You have a custom threat detection policy based on the IP address ranges of your companyâ€™s United States-based offices.

You receive many alerts related to impossible travel and sign-ins from risky IP addresses.

You determine that 99% of the alerts are legitimate sign-ins from your corporate offices.

You need to prevent alerts for legitimate sign-ins from known locations.

Which two actions should you perform? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

Georgescu Andrei · Accepted Answer

Override automatic data enrichment.

Georgescu Andrei · Accepted Answer

Add the IP addresses to the other address range category and add a tag.

Georgescu Andrei · Answer

Add the IP addresses to the corporate address range category.

Georgescu Andrei · Answer

Increase the sensitivity level of the impossible travel anomaly detection policy.

Georgescu Andrei · Answer

Create an activity policy that has an exclusion for the IP addresses.

List of questions