SC-200 · Question #117
You have a Microsoft 365 E5 subscription that uses Microsoft SharePoint Online. You delete users from the subscription. You need to be notified if the deleted users downloaded numerous documents…
The correct answer is D. an insider risk policy. When users leave your organization, there are specific risk indicators typically associated with data theft by departing users. This policy template uses exfiltration indicators for risk scoring and focuses on detection and alerts in this risk area…
Question
You have a Microsoft 365 E5 subscription that uses Microsoft SharePoint Online. You delete users from the subscription. You need to be notified if the deleted users downloaded numerous documents from SharePoint Online sites during the month before their accounts were deleted. What should you use?
Options
- Aa file policy in Microsoft Defender for Cloud Apps
- Ban access review policy
- Can alert policy in Microsoft Defender for Office 365
- Dan insider risk policy
How the community answered
(60 responses)- A8% (5)
- B5% (3)
- C3% (2)
- D83% (50)
Explanation
When users leave your organization, there are specific risk indicators typically associated with data theft by departing users. This policy template uses exfiltration indicators for risk scoring and focuses on detection and alerts in this risk area. https://learn.microsoft.com/en-us/microsoft-365/compliance/insider-risk-management- policies?view=o365-worldwide#data-theft-by-departing-users
Topics
Community Discussion
No community discussion yet for this question.