MS-102 · Question #328
You have a Microsoft 365 E5 subscription and use Microsoft Defender for Office 365. You need to implement a social engineering awareness solution that meets the following requirements: - To reset a…
The correct answer is C. Attack simulation training. Attack simulation training in Microsoft Defender for Office 365 allows administrators to emulate phishing attacks, track user interactions with malicious links, and suggest follow-up training to improve security awareness.
Question
You have a Microsoft 365 E5 subscription and use Microsoft Defender for Office 365. You need to implement a social engineering awareness solution that meets the following requirements:
- To reset a user's password, emulate an email message that contains a
link.
- Track any users that selects the email message link.
- Suggest further social engineering training.
What should you use in the Microsoft Defender portal?
Options
- AExposure insights
- BLearning hub
- CAttack simulation training
- DThreat tracker
How the community answered
(41 responses)- A10% (4)
- B2% (1)
- C73% (30)
- D15% (6)
Why each option
Attack simulation training in Microsoft Defender for Office 365 allows administrators to emulate phishing attacks, track user interactions with malicious links, and suggest follow-up training to improve security awareness.
Exposure insights in Microsoft Defender XDR provide visibility into an organization's security posture and potential vulnerabilities, but it does not perform simulated attacks or track user interactions with phishing links.
The Learning hub in Microsoft Defender portal offers general security learning resources and training but does not provide the capability to conduct simulated attacks or track user responses to them.
Attack simulation training in Microsoft Defender for Office 365 is specifically designed to run simulated phishing campaigns, including emulating password reset emails with malicious links, to assess user vulnerability. It tracks user actions, such as clicking links or entering credentials, and integrates with training modules to educate users based on their performance, directly meeting all stated requirements.
Threat tracker in Microsoft Defender for Office 365 helps administrators monitor and investigate current and emerging threats but is not a tool for conducting internal attack simulations and user training.
Concept tested: Microsoft Defender Attack simulation training
Source: https://learn.microsoft.com/en-us/microsoft-365/security/office-365-security/attack-simulation-training-get-started?view=o365-worldwide
Topics
Community Discussion
No community discussion yet for this question.