Exam MS-203 topic 4 question 103 discussion

Actual exam question from Microsoft's MS-203

Question #: 103
Topic #: 4

You have a Microsoft 365 subscription that contains a verified domain named contoso.com.

You have an app named App1 that sends meeting invitations on behalf of users. The invitations are sent from a Microsoft Exchange Online mailbox that has a sender address of [email protected] and a reply-to address of the user scheduling the meeting.

You create an anti-phishing policy named Policy1 that includes all the users in contoso.com. Policy1 is configured to protect the domain against impersonation.

You discover that email messages sent from App1 are quarantined.

You need to ensure that App1 can send messages that impersonate any contoso.com user.

How should you modify Policy1?

A. Add [email protected] as a trusted sender.
B. Enable spoof intelligence.
C. Add [email protected] as an excluded user.
D. Enable mailbox intelligence.

Show Suggested Answer

Suggested Answer: C 🗳️

by syougun200x at April 27, 2023, 1:02 p.m.

Comments

Submit Cancel

Amir1909

6 months, 2 weeks ago

C is correct

upvoted 1 times

...

Nyamnyam

7 months, 3 weeks ago

Selected Answer: A

C is not correct, sorry. This adds "exceptions for the internal recipients that the policy applies to". But app1 is not sending to itself, rather to others. In opposite, with answer A you "specify impersonation protection exception". https://learn.microsoft.com/en-us/microsoft-365/security/office-365-security/anti-phishing-policies-mdo-configure?view=o365-worldwide

upvoted 1 times

...

Cooljoy7777

8 months, 3 weeks ago

Selected Answer: C

the answer is correct https://learn.microsoft.com/en-us/azure/active-directory/governance/conditional-access-exclusion#why-would-you-exclude-users-from-policies

upvoted 1 times

Cooljoy7777

8 months, 3 weeks ago

https://learn.microsoft.com/en-us/microsoft-365/security/office-365-security/anti-malware-policies-configure?view=o365-worldwide#how-do-you-know-these-procedures-worked

upvoted 1 times

...

Jagomsah

1 year ago

Selected Answer: A

KB >> https://learn.microsoft.com/en-us/microsoft-365/security/office-365-security/anti-phishing-policies-about?view=o365-worldwide#exclusive-settings-in-anti-phishing-policies-in-microsoft-defender-for-office-365 “ Trusted senders and domain are exceptions to the impersonation protection settings. Messages from the specified senders and sender domains are never classified as impersonation-based attacks by the policy”

upvoted 1 times

Jagomsah

1 year ago

Sorry, just tested in Lab. Same place where you configure Users/Groups/Domains affected by the Phishing Policy, there is a section where you can EXCLUDE Users/Groups/Domains. Right answer C

upvoted 1 times

...

syougun200x

1 year, 1 month ago

I rather go for A. Anti-phishing policy -> add trusted senders and domains

upvoted 1 times

...