Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Microsoft 365 Certified: Endpoint Administrator Associate · Microsoft
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
C is correct
To monitor mailbox activities in Microsoft Defender for Cloud Apps, Microsoft 365 must first be connected as a connected app so its activity data, including Exchange Online activity, can flow into Defender for Cloud Apps. Why not the others A. Create an activity policy — this is used after the app data is already available, to alert on specific mailbox-related events. It does not establish the monitoring connection itself. B. Create an access policy — access policies are for real-time session control, not for onboarding mailbox activity monitoring. C. Enable mailbox audit logging — audit logging supports Exchange visibility, but the key action to use Defender for Cloud Apps for mailbox monitoring is connecting Microsoft 365 through an app connector
B. Enable mailbox audit logging.