Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Microsoft 365 Certified: Endpoint Administrator Associate · Microsoft
Hot Area / Sentence Completion
Select the appropriate option to complete the statement. Click Check Answer below to see the marked solution.
Hotspot Solution:
You should only add a sender to the trusted senders to bypass the user impersonation checks for that person. E.g., if the CEO sends email into the org from his personal email account, or the CEO of the other organisation happens to have the exact same name as another protected user. Mailbox Intelligence uses the users individual patterns of communication to help protect them against impersonation/spoofing, so this is the most relevant feature for the second part of the question in, my opinion. In the real world, ensuring smooth communication should never be at the expense of security, but who knows what Microsoft want us to answer here.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
Enable users to protect — add the partner CEO as a protected user (user impersonation protection). Enable intelligence for impersonation protection — turn on mailbox intelligence for impersonations to reduce false positives for people who email that CEO often.
1. Enable users to protect Adding the CEO to the trusted senders and domains only allows that specific email through, it doesn't block impersonations. You must use the User impersonation protection feature which is turned on, but no users have been added. Add the CEO. This will work, as long as Mailbox intelligence for impersonations is turned Off. 2. Add trusted senders and domains When this setting includes a sender (the CEO), the "Trusted impersonated senders and domains" will say "On for 0 domain(s) and 1 sender(s)" https://learn.microsoft.com/en-us/defender-office-365/anti-phishing-policies-about
1. To ensure that malicious email impersonating the CEO of a partner company is blocked: You must modify: the Enable domains to protect setting. This ensures the policy actively identifies and protects against impersonation of specific domains. 2. To minimize disrupting users that frequently exchange legitimate email with the CEO of a partner company: You must configure the Add trusted senders and domains setting. This reduces false positives by allowing legitimate emails from trusted senders to pass through. _____________________________________________________________