nerdexam
Microsoft

MS-102 · Question #482

You have a Microsoft 365 subscription. You recently configured a Microsoft SharePoint Online tenant in the subscription. You plan to create an alert policy. You need to ensure that an alert is…

The correct answer is A. Enable Microsoft Office 365 Defender for Cloud Apps. https://[tenant].portal.cloudappsecurity.com --> Control --> Policies --> Create Policy --> Activity Policy --> Repeated Activity https://docs.microsoft.com/en-us/cloud-app-security/use-case-admin-quarantine

Submitted by chiamaka_o· Apr 18, 2026Manage security and threats by using Microsoft Defender XDR

Question

You have a Microsoft 365 subscription. You recently configured a Microsoft SharePoint Online tenant in the subscription. You plan to create an alert policy. You need to ensure that an alert is generated only when malware is detected in more than five documents stored in SharePoint Online during a period of 10 minutes. What should you do first?

Options

  • AEnable Microsoft Office 365 Defender for Cloud Apps.
  • BDeploy Windows Defender Advanced Threat Protection (Windows Defender ATP)
  • CEnable Microsoft Office 365 Analytics.

How the community answered

(17 responses)
  • A
    82% (14)
  • B
    6% (1)
  • C
    12% (2)

Explanation

https://[tenant].portal.cloudappsecurity.com --> Control --> Policies --> Create Policy --> Activity Policy --> Repeated Activity https://docs.microsoft.com/en-us/cloud-app-security/use-case-admin-quarantine

Topics

#Defender for Cloud Apps#SharePoint Online alerts#Malware detection#Alert policies

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full MS-102 Practice