MS-102 Practice Test

Question 71

You are reviewing alerts in the Microsoft 365 Defender portal. How long are the alerts retained in the portal?

1. 30 days
2. 60 days
3. 3 months
4. 6 months
5. 12 months

Question 72

You have a Microsoft 365 E5 subscription. From the Microsoft 365 Defender portal, you plan to export a detailed report of compromised users. What is the longest time range that can be included in the report?

1. 1 day
2. 7 days
3. 30 days
4. 90 days

Question 73

You have a Microsoft 365 subscription. You deploy the anti-phishing policy shown in the following exhibit. Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point.

Question 74

You use Microsoft Defender for Endpoint. You have the Microsoft Defender for Endpoint device groups shown in the following table. You plan to onboard computers to Microsoft Defender for Endpoint as shown in the following table. To which device group will each computer be added? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 75

You have a Microsoft 365 subscription that uses Microsoft Defender for Office 365. You need to configure policies to meet the following requirements: Customize the common attachments filter. Enable impersonation protection for sender domains. Which type of policy should you configure for each requirement? To answer, drag the appropriate policy types to the correct requirements. Each policy type may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point.