Microsoft 365 Administrator Expert MS-102 Practice Question
A user in your Microsoft 365 tenant was automatically added to the Restricted users list after the account sent a large volume of outbound spam. You have verified that the account is now secure and you need to restore the user's ability to send email outside the organization as soon as possible while keeping the incident history for future review.
Which action should you perform in the Microsoft 365 Defender portal?
Add the user's address to the Tenant Allow/Block List as an allowed sender.
Wait until the 30-day automatic expiry period removes the user from the list.
In Email & collaboration > Review > Restricted entities > Users, select the account and choose Unblock user.
Run the Set-Mailbox cmdlet in Exchange Online PowerShell and set the ExternalEmailEnabled parameter to True.
In the Microsoft 365 Defender portal, go to Email & collaboration > Review > Restricted entities > Users, select the affected account, and choose Unblock user. The unblock operation immediately removes the user from the Restricted users list, retains the incident details for auditing, and restores the ability to send external mail (typically within 30 minutes). Deleting the entry or waiting for automatic expiry would also restore send capability, but it would delay reinstatement or remove the historical data you need to keep. Adding the user to the tenant allow/block list (TABL) has no effect on the Restricted users list, and PowerShell cmdlets such as Set-Mailbox do not control the restriction imposed by Defender for Office 365.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is the Restricted users list in Microsoft 365 Defender?
Open an interactive chat with Bash
How does unblocking a user in Microsoft 365 Defender restore email functionality?
Open an interactive chat with Bash
Why doesn't adding a user to the Tenant Allow/Block List remove them from the Restricted users list?
Open an interactive chat with Bash
Microsoft 365 Administrator Expert MS-102
Manage security and threats by using Microsoft Defender XDR
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .