Free MS-102 Exam Braindumps
Microsoft 365 Administrator Questions 216–220 (page: 45)

Updated On: 10-Feb-2026
View Related Case Study

HOTSPOT (Drag and Drop is not supported)
You have a Microsoft 365 E3 subscription.
You plan to launch Attack simulation training for all users.
Which social engineering technique and training experience will be available? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

  1. See Explanation section for answer.

Answer(s): A

Explanation:




Box 1: Credential Harvest
Attack simulation training offers a subset of capabilities to E3 customers as a trial. The trial offering contains
the ability to use a Credential Harvest payload and the ability to select 'ISA Phishing' or 'Mass Market Phishing' training experiences. No other capabilities are part of the E3 trial offering.
Note: In Attack simulation training, multiple types of social engineering techniques are available: Credential Harvest
Malware Attachment Link to Malware
Etc.
Box 2: Mass Market Phishing


Reference:

https://learn.microsoft.com/en-us/microsoft-365/security/office-365-security/attack-simulation-training-get- started



View Related Case Study

You have a Microsoft 365 subscription that uses Microsoft Defender for Office 365.
You need to ensure that users are prevented from opening or downloading malicious files from Microsoft Teams, OneDrive, or SharePoint Online.
What should you do?

  1. Create a new Anti-malware policy.
  2. Configure the Safe Links global settings.
  3. Create a new Anti-phishing policy.
  4. Configure the Safe Attachments global settings.

Answer(s): D

Explanation:

Safe Attachments for SharePoint, OneDrive, and Microsoft Teams
In organizations with Microsoft Defender for Office 365, Safe Attachments for SharePoint, OneDrive, and Microsoft Teams provides an additional layer of protection against malware. After files are asynchronously scanned by the common virus detection engine in Microsoft 365, Safe Attachments opens files in a virtual environment to see what happens (a process known as detonation). Safe Attachments for SharePoint, OneDrive, and Microsoft Teams also helps detect and block existing files that are identified as malicious in team sites and document libraries.


Reference:

https://learn.microsoft.com/en-us/microsoft-365/security/office-365-security/safe-attachments-for-spo-odfb- teams-about



View Related Case Study

HOTSPOT (Drag and Drop is not supported)
Your company uses Microsoft Defender for Endpoint. Microsoft Defender for Endpoint includes the device groups shown in the following table.


You onboard a computer named computer1 to Microsoft Defender for Endpoint as shown in the following exhibit.


Use the drop-down menus to select the answer choice that completes each statement.
NOTE: Each correct selection is worth one point.
Hot Area:

  1. See Explanation section for answer.

Answer(s): A

Explanation:




Box 1: Group3 and Group4 only Computer1 has no Demo Tag.
Computer1 is in the adatum domain and OS is Windows 10. Box 2: Group1, Group2, Group3 and Group4



View Related Case Study

HOTSPOT (Drag and Drop is not supported)
You have a Microsoft 365 E5 subscription that uses Microsoft Defender for Office 365.
The subscription has the default inbound anti-spam policy and a custom Safe Attachments policy. You need to identify the following information:
The number of email messages quarantined by zero-hour auto purge (ZAP) The number of times users clicked a malicious link in an email message
Which Email & collaboration report should you use? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

  1. See Explanation section for answer.

Answer(s): A

Explanation:




Box 1: Mailflow status report
The number of email messages quarantined by zero-hour auto purge (ZAP)
Mailflow view for the Mailflow status report
The Mailflow tab shows you how Microsoft's email threat protection features filter incoming and outgoing email in your organization. This view uses a horizontal flow diagram (known as a Sankey diagram) to provide details on the total email count, and how threat protection features affect this count.


The diagram is organized into the following horizontal bands:
* ZAP removed: Messages that were removed by zero-hour auto purge (ZAP).
* Etc.
Box 2: URL protection report
The number of times users clicked a malicious link in an email message
URL protection report
The URL protection report provides summary and trend views for threats detected and actions taken on URL clicks as part of Safe Links. This report doesn't have click data from users if Track user clicks in the effective Safe Links policy isn't selected.


Reference:

https://learn.microsoft.com/en-us/microsoft-365/security/office-365-security/reports-email-security https://learn.microsoft.com/en-us/microsoft-365/security/office-365-security/reports-defender-for-office-365



View Related Case Study

You have a Microsoft 365 tenant.
You plan to manage incidents in the tenant by using the Microsoft Defender.
Which Microsoft service source will appear on the Incidents page of the Microsoft Defender portal?

  1. Microsoft Sentinel
  2. Microsoft Defender for Cloud
  3. Azure Arc
  4. Microsoft Defender for Identity

Answer(s): D

Explanation:

Manage incidents on the Incidents page in the Microsoft Defender portal at https://security.microsoft.com/ incidents-queue:
Filter, Services sources includes Microsoft Defender for Identity:
Flllt,er
C ear - ,ers
□
s s
Seect-1
D• eso -
□
□ ..
nciden ass·gnment
□ Se&
□ Ass" ed ·o -
□ Ass•g -d. rre:
MS gr-
u p e s rvice source
0 0
□ ..
D
0 0
dp V
V
V



























Reference:

https://learn.microsoft.com/en-us/microsoft-365/security/office-365-security/mdo-sec-ops-manage-incidents- and-alerts



Viewing page 45 of 85
Viewing questions 221 - 225 out of 473 questions


Post your Comments and Discuss Microsoft MS-102 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!