MS-102 Microsoft 365 Administrator Expert Managing Defender for Office 2

Question 1

An administrator notices that Safe Links is not rewriting URLs in emails sent between internal users. What is the most likely cause?

Accepted Answer

Safe Links does not support internal email scanning by default and requires enabling 'Apply Safe Links to email sent within the organization'

Answer

Safe Links must be explicitly configured to scan internal email by enabling the 'Apply Safe Links to email sent within the organization' setting in the policy.

Question 2

Which Defender for Office 365 feature provides a detonation-based analysis of email attachments in an isolated environment before delivery?

Accepted Answer

Safe Attachments

Answer

Safe Attachments detonates suspicious attachments in a sandboxed virtual environment to detect malware before the email is delivered to the recipient.

Question 3

A user reports that clicking a URL in an Outlook desktop client is not being checked by Safe Links. Which setting must be enabled in the Safe Links policy?

Accepted Answer

Apply Safe Links to supported Office apps

Answer

The 'Apply Safe Links to supported Office apps' setting must be enabled to protect URLs clicked within Office desktop applications like Word, Excel, and Outlook.

Question 4

Which report in the Microsoft Defender portal shows the volume of messages identified as malware, phish, spam, and bulk over time?

Accepted Answer

Mail flow status summary report

Answer

The Mail flow status summary report displays aggregated counts of messages categorized as malware, phish, spam, and bulk for a selected time range.

Question 5

An organization wants to ensure that emails failing SPF, DKIM, or DMARC checks are automatically moved to quarantine. Which policy controls this behavior?

Accepted Answer

Anti-phishing policy with spoof intelligence settings

Answer

The anti-phishing policy's spoof intelligence settings control how messages that fail composite authentication (SPF/DKIM/DMARC) are handled, including moving them to quarantine.

(MS-102) Microsoft 365 Administrator Expert Practice Test

(MS-102) Microsoft 365 Administrator Expert Practice Test

MS-102 Microsoft 365 Administrator Expert Managing Defender for Office 2