MS-102 · Question #118
You have a Microsoft 365 subscription that contains the alerts shown in the following table. Which properties of the alerts can you modify?
The correct answer is B. Status and Comment only. In Microsoft 365, you can modify an alert's Status and add Comments.
Question
You have a Microsoft 365 subscription that contains the alerts shown in the following table. Which properties of the alerts can you modify?
Options
- AStatus only
- BStatus and Comment only
- CStatus and Severity only
- DStatus, Severity, and Comment only
- EStatus, Severity, Comment and Category
How the community answered
(53 responses)- A4% (2)
- B87% (46)
- D2% (1)
- E8% (4)
Why each option
In Microsoft 365, you can modify an alert's Status and add Comments.
While Status can be modified, Comments can also be added, so it's not the only modifiable property.
When managing alerts in the Microsoft 365 Defender portal, administrators can change an alert's status (e.g., New, In progress, Resolved) and add comments for tracking and communication purposes.
Severity is generally assigned by the system based on the nature of the alert and is not typically user-modifiable.
Severity is generally assigned by the system and cannot be directly modified by the user.
Severity and Category are typically system-assigned and are not properties that users can modify.
Concept tested: Microsoft 365 Defender alert management properties
Source: https://learn.microsoft.com/en-us/microsoft-365/security/defender/investigate-alerts-in-microsoft-365-defender?view=o365-worldwide
Topics
Community Discussion
No community discussion yet for this question.