You have a Microsoft 365 E5 subscription that contains a Microsoft SharePoint Online site named Site1. You need to be notified if a user downloads more than 50 files in one minute from Site1. Which…

The correct answer is B. activity policy. You should create an activity policy in the Microsoft Defender for Cloud Apps portal to be notified if a user downloads more than 50 files in one minute from Site1. Activity policies allow you to monitor specific user activities, including high rates of certain actions such as…

Submitted by hassan_iq· Mar 6, 2026Implement authentication and access management solution

Question

You have a Microsoft 365 E5 subscription that contains a Microsoft SharePoint Online site named Site1. You need to be notified if a user downloads more than 50 files in one minute from Site1. Which type of policy should you create in the Microsoft Defender for Cloud Apps?

Options

Asession policy
Bactivity policy
Cfile policy
Dapp discovery policy

How the community answered

(29 responses)

A
10% (3)
B
72% (21)
C
14% (4)
D
3% (1)

Explanation

You should create an activity policy in the Microsoft Defender for Cloud Apps portal to be notified if a user downloads more than 50 files in one minute from Site1. Activity policies allow you to monitor specific user activities, including high rates of certain actions such as file downloads, and trigger alerts based on those activities. This fits the requirement to detect and notify on a user downloading more than 50 files within a short time frame.

Topics

#Defender for Cloud Apps#activity policy#anomaly detection#file download threshold

Community Discussion

No community discussion yet for this question.

Full SC-300 Practice