Microsoft
MS-102 · Question #381
You have a Microsoft 365 E5 subscription and use Microsoft Defender for Cloud Apps. You are reviewing the activity log of the subscription. You need to ensure that events originating from the on-premi
Sign in or unlock MS-102 to reveal the answer and full explanation for question #381. The question stem and answer options stay visible for context.
Submitted by layla.eg· Apr 18, 2026Implement and manage Microsoft Entra identity and access
Question
You have a Microsoft 365 E5 subscription and use Microsoft Defender for Cloud Apps. You are reviewing the activity log of the subscription. You need to ensure that events originating from the on-premises network are categorized automatically as Administrative. What should you create?
Options
- Aa critical asset classification
- Ban indicator for IP addresses
- Can IP address range
- Da named location
Unlock MS-102 to see the answer
You've previewed enough free MS-102 questions. Unlock MS-102 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#Named Locations#Defender for Cloud Apps#Microsoft Entra#Event Categorization