You have a Microsoft 365 E5 subscription and use Microsoft Defender for Office 365. You need to implement a social engineering awareness solution that meets the following requirements: - To reset a user's password, emulate an email message that contains a link. - Track any user that selects the email message link. - Suggest further social engineering training. What should you use in the Microsoft Defender portal?

Microsoft

MS-102 · Question #318

You have a Microsoft 365 E5 subscription and use Microsoft Defender for Office 365. You need to implement a social engineering awareness solution that meets the following requirements: - To reset a…

The correct answer is A. Attack simulation training. Attack simulation training (A) in the Microsoft Defender portal is the correct tool because it directly satisfies all three requirements: (1) It can simulate credential-harvest phishing emails containing a 'reset your password' lure with a link - emulating a real social…

Submitted by amina.ke· Apr 18, 2026Manage security and threats by using Microsoft Defender XDR

Question

You have a Microsoft 365 E5 subscription and use Microsoft Defender for Office 365. You need to implement a social engineering awareness solution that meets the following requirements:

To reset a user's password, emulate an email message that contains a

link.

Track any user that selects the email message link.
Suggest further social engineering training.

What should you use in the Microsoft Defender portal?

Options

AAttack simulation training
BLearning hub
CExposure insights
DThreat tracker

How the community answered

(65 responses)

A
83% (54)
B
2% (1)
C
5% (3)
D
11% (7)

Explanation

Attack simulation training (A) in the Microsoft Defender portal is the correct tool because it directly satisfies all three requirements: (1) It can simulate credential-harvest phishing emails containing a 'reset your password' lure with a link - emulating a real social engineering attack. (2) It tracks which users click the link, providing detailed per-user reporting. (3) Based on the results, it automatically suggests and assigns targeted security awareness training courses to users who interacted with the simulation. The other options do not fit: Learning hub is a training catalog, Exposure insights provides vulnerability scoring, and Threat tracker monitors real-world threat activity - none conduct simulated attacks.

Topics

#Attack simulation training#Phishing simulation#Social engineering awareness#User security training

Community Discussion

No community discussion yet for this question.

Full MS-102 Practice