Describe Threat Protection Solutions of Microsoft 365 MS-900 Practice Questions (Page 9)

Questions 41–45

1. 41application · medium

   A security administrator wants to use Microsoft Secure Score to prioritize security improvements. They need to identify which recommended actions will have the greatest impact on the score. What should they review?

   • AThe score impact column in the recommended actions list
   • BThe audit log
   • CThe threat analytics dashboard
   • DThe service health dashboard
   Reveal Solution Discussion Select an answer first
2. 42application · medium

   A company uses Microsoft 365 and wants to protect users from phishing emails that contain malicious links. They also want to review the results of the protection in a central location. What should they configure?

   • AConfigure Conditional Access policies and review in the Azure AD portal
   • BConfigure Safe Links in Defender for Office 365 and review reports in the Microsoft Defender portal
   • CConfigure data loss prevention policies and review in the compliance portal
   • DConfigure device compliance policies in Intune and review in the Azure portal
   Reveal Solution Discussion Select an answer first
4. 43foundation · easy

   What is a key benefit of using Microsoft Secure Score?

   • AIt helps organizations measure and improve their security posture
   • BIt replaces the need for a firewall
   • CIt provides a backup of all user data
   • DIt automatically blocks all malicious emails
   Reveal Solution Discussion Select an answer first
5. 44expert · hard

   A company has a large number of Windows devices that are not all managed by Intune. They want to ensure these devices have real-time protection against malware and are visible in the Microsoft Defender portal. What should they do?

   • AUse Microsoft Secure Score to enable protection
   • BOnboard all devices to Defender for Endpoint using local scripts or Group Policy
   • CUse Microsoft Defender for Office 365 to protect devices
   • DRequire all devices to be enrolled in Intune before they can be protected
   Reveal Solution Discussion Select an answer first
6. 45expert · hard

   A company uses Defender for Office 365 but users still receive some phishing emails that pass through. The security team wants to improve protection without blocking legitimate email. They also want to see which emails were blocked. What should they do?

   • AIncrease the spam confidence level threshold to the highest setting
   • BEnable Defender for Endpoint and review device alerts
   • CTune Safe Links and Safe Attachments policies and review the Threat Explorer
   • DDisable Safe Links and rely on the built-in Exchange Online Protection
   Reveal Solution Discussion Select an answer first