QUESTION: 33 Exam Topic: Implement and manage threat protection questions

You have a Microsoft 365 E5 subscription and a hybrid Microsoft Exchange Server organization.
Each member of a group named Executive has an on-premises mailbox. Only the Executive group members have multi-factor authentication (MFA) enabled. Each member of a group named Research has a mailbox in Exchange Online.
You need to use Microsoft Office 365 Attack simulator to model a spear-phishing attack that targets the Research group members.
The email addresses that you intend to spoof belong to the Executive group members. What should you do first?

From the Azure ATP admin center, configure the primary workspace settings
From the Microsoft Azure portal, configure the user risk policy settings in Azure AD Identity Protection
Enable MFA for the Research group members
Migrate the Executive group members to Exchange Online

Answer(s): C

Reference:

https://docs.microsoft.com/en-us/office365/securitycompliance/attack-simulator

Reveal Solution Next Question

QUESTION: 34 Exam Topic: Implement and manage threat protection questions

You have a Microsoft 365 E5 subscription.
You implement Advanced Threat Protection (ATP) safe attachments policies for all users.
User reports that email messages containing attachments take longer than expected to be received.
You need to reduce the amount of time it takes to receive email messages that contain attachments. The solution must ensure that all attachments are scanned for malware. Attachments that have malware must be blocked. What should you do from ATP?

Set the action to Block
Add an exception
Add a condition
Set the action to Dynamic Delivery

Answer(s): D

Reference:

https://docs.microsoft.com/en-us/office365/securitycompliance/dynamic-delivery-and-previewing

Reveal Solution Next Question

QUESTION: 35 Exam Topic: Implement and manage threat protection questions

HOTSPOT (Drag and Drop is not supported)
Your network contains an Active Directory domain named contoso.com. The domain contains a VPN server named VPN1 that runs Windows Server 2016 and has the Remote Access server role installed.

You have a Microsoft Azure subscription.
You are deploying Azure Advanced Threat Protection (ATP).
You install an Azure ATP standalone sensor on a server named Server1 that runs Windows Server 2016. You need to integrate the VPN and Azure ATP.
What should you do? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.
Hot Area:

See Explanation section for answer.

Answer(s): A

Explanation:

Reference:

https://docs.microsoft.com/en-us/azure-advanced-threat-protection/install-atp-step6-vpn

Reveal Solution Next Question

QUESTION: 36 Exam Topic: Implement and manage threat protection questions

HOTSPOT (Drag and Drop is not supported)
You have a Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP) deployment that has the custom network indicators turned on. Microsoft Defender ATP protects two computers that run Windows 10 as shown in the following table.

Microsoft Defender ATP has the machine groups shown in the following table.

From Microsoft Defender Security Center, you create the URLs/Domains indicators shown in the following table.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area: