You have a new Microsoft 365 E5 tenant. You need to enable an alert policy that will be triggered when an elevation of Microsoft Exchange Online administrative privileges is detected. What should…

The correct answer is A. Enable auditing. In order to monitor and get alerted on specific activities such as elevation of administrative privileges, auditing needs to be enabled in your Microsoft 365 environment. Auditing will record events such as changes in permissions and other administrative activities, which can…

Submitted by hassan_iq· Apr 18, 2026Manage security and threats by using Microsoft Defender XDR

Question

You have a new Microsoft 365 E5 tenant. You need to enable an alert policy that will be triggered when an elevation of Microsoft Exchange Online administrative privileges is detected. What should you do first?

Options

AEnable auditing.
BEnable Microsoft 365 usage analytics.
CCreate an Insider risk management policy.
DCreate a communication compliance policy.

How the community answered

(59 responses)

A
90% (53)
B
5% (3)
C
2% (1)
D
3% (2)

Explanation

In order to monitor and get alerted on specific activities such as elevation of administrative privileges, auditing needs to be enabled in your Microsoft 365 environment. Auditing will record events such as changes in permissions and other administrative activities, which can then be monitored through alert policies to notify administrators when specific events occur.

Topics

#Auditing#Alert Policies#Exchange Online#Administrative Privileges

Community Discussion

No community discussion yet for this question.

Full MS-102 Practice