Microsoft 365 Administrator Expert MS-102 Practice Question

A user in your Microsoft 365 tenant was automatically added to the Restricted users list after the account sent a large volume of outbound spam. You have verified that the account is now secure and you need to restore the user's ability to send email outside the organization as soon as possible while keeping the incident history for future review.

Which action should you perform in the Microsoft 365 Defender portal?

  • Add the user's address to the Tenant Allow/Block List as an allowed sender.

  • In Email & collaboration > Review > Restricted entities > Users, select the account and choose Unblock user.

  • Run the Set-Mailbox cmdlet in Exchange Online PowerShell and set the ExternalEmailEnabled parameter to True.

  • Wait until the 30-day automatic expiry period removes the user from the list.

Microsoft 365 Administrator Expert MS-102
Manage security and threats by using Microsoft Defender XDR
Your Score:
Settings & Objectives
Random Mixed
Questions are selected randomly from all chosen topics, with a preference for those you haven’t seen before. You may see several questions from the same objective or domain in a row.
Rotate by Objective
Questions cycle through each objective or domain in turn, helping you avoid long streaks of questions from the same area. You may see some repeat questions, but the distribution will be more balanced across topics.

Check or uncheck an objective to set which questions you will receive.

Bash, the Crucial Exams Chat Bot
AI Bot