🔥 40% Off Crucial Exams Memberships — This Week Only

3 days, 13 hours remaining!
Crucial Exams

Microsoft 365 Administrator Expert MS-102 Practice Question

While configuring a custom alert policy in the Microsoft 365 Defender portal, you need the policy to generate an alert only after a user receives five or more phishing messages within a 30-minute window. However, the fields to define the number of activities and the time interval are not available in the wizard. Which change enables you to expose and configure these threshold settings?

  • Switch the alert trigger to "When activities match rule conditions" instead of "Every time an activity matches."

  • Add the mailbox as a scoped entity instead of applying the policy to all users.

  • Change the alert category to Malware.

  • Set the policy severity to High.

Microsoft 365 Administrator Expert MS-102
Manage security and threats by using Microsoft Defender XDR
Your Score:
Settings & Objectives
Random Mixed
Questions are selected randomly from all chosen topics, with a preference for those you haven’t seen before. You may see several questions from the same objective or domain in a row.
Rotate by Objective
Questions cycle through each objective or domain in turn, helping you avoid long streaks of questions from the same area. You may see some repeat questions, but the distribution will be more balanced across topics.

Check or uncheck an objective to set which questions you will receive.

Wipe Score
Bash, the Crucial Exams Chat Bot
AI Bot