MS-102 Question 197

Question

You have a Microsoft 365 subscription that uses Microsoft Defender for Endpoint. All the devices in your organization are onboarded to Microsoft Defender for Endpoint. You need to ensure that an alert is generated if malicious activity was detected on a device during the last 24 hours. What should you do?
A. From the Microsoft Purview compliance portal, create a data loss prevention (DLP) policy.
B. From Alerts queue, create a suppression rule and assign an alert.
C. From Advanced hunting, create a query and a detection rule.
D. From the Microsoft Purview compliance portal, create an audit log search.

Accepted Answer

Marked answer: C. From Advanced hunting, create a query and a detection rule.

MS-102 Question 197

Community Discussion

Preparing Practice Exam…

MS-102 Question 197

Community Discussion