exam questions

Exam MS-100 All Questions

View all questions & answers for the MS-100 exam

Exam MS-100 topic 4 question 63 discussion

Actual exam question from Microsoft's MS-100
Question #: 63
Topic #: 4
[All MS-100 Questions]

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have a Microsoft 365 subscription.
You discover that some external users accessed content on a Microsoft SharePoint site. You modify the SharePoint sharing policy to prevent sharing outside your organization.
You need to be notified if the SharePoint policy is modified in the future.
Solution: From the Security & Compliance admin center, you create a threat management policy.
Does this meet the goal?

  • A. Yes
  • B. No
Show Suggested Answer Hide Answer
Suggested Answer: A 🗳️
We can create a threat management policy to alert us when the sharing policy is changed.
Create a new Alert policy > under Category select Threat Management > under 'Activity is' scroll down to the 'Site administration activities' and select 'Changed a sharing policy'.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
sailerjerry
Highly Voted 5 years, 5 months ago
An Alert Policy needs to be created not a Threat Management one. But there is no option for that.
upvoted 14 times
J0J0
4 years ago
Alerts> Alert Policy There is an option "Changed a sharing policy" in the Activity list.
upvoted 1 times
...
...
ssingh
Highly Voted 5 years, 6 months ago
I think answer should be B. I believe an alert need to be created in security and compliance center. Anybody?
upvoted 9 times
itmp
5 years, 1 month ago
Answer is 100% correct. SCC-> Alerts -> New alert policy -> Threat Management-> Activity is -> Changed a sharing policy. The text displayed for this selection states: "An administrator changed a SharePoint sharing policy by using the Office 365 Admin center, SharePoint admin center, or SharePoint Online Management Shell. Any change to the settings in the sharing policy in your organization will be logged"
upvoted 33 times
mikerss
5 years ago
Alert Policy is different from threat management policy
upvoted 9 times
...
Jayatheerthan
4 years, 8 months ago
ITMP is correct. I have checked in my tenant.
upvoted 6 times
...
...
...
sehlohomoletsane
Most Recent 2 years, 3 months ago
Is they not this question in MS-101?
upvoted 1 times
...
Startkabels
2 years, 7 months ago
Selected Answer: A
in the Compliance Center (MS Purview now), create an Alert policy based on activity type Site administration activities > Changed a sharing policy
upvoted 2 times
...
jkklim
3 years, 6 months ago
stick to NO.
upvoted 2 times
...
fofo1960
3 years, 8 months ago
Things changes, the new location is https://security.microsoft.com/ then click on Policies & rules --> Alert Policy --> New Altert Policy --> set the Severity and category to what ever and click next .. Now you can see the Activity is, and you can type the Site Administration ...
upvoted 4 times
...
girikedar
3 years, 9 months ago
An Alert Policy Should be create Security & compliance > Alerts > Alert Policy and threat management....this is the correct answer...... so i think answer is not right
upvoted 1 times
...
Mr01z0
4 years, 1 month ago
"Solution: From the Security & Compliance admin center, you create a threat management policy." this is worded poorly, the proposed solution is suggesting creating an alert policy in the category of "thread management".
upvoted 2 times
...
stromnessian
4 years, 4 months ago
Alert policy. Giving it a category of "Threat management" doesn't make it a threat management policy.
upvoted 4 times
...
mkoprivnj
4 years, 6 months ago
Yes for sure!
upvoted 3 times
...
Jake1
4 years, 6 months ago
I've tested this in our tenant and ssingh is right. Threat Management is a type of Alert Policy which you can configure along with DLP, Information Governance, Permissions, Mail Flow, and Others type of Alert Policy. Thus, the answer is correct. YES.
upvoted 3 times
...
Joshing
4 years, 8 months ago
I don't believe this is Threat Management Policy. Threat Management Policies are in Threat management section, this regards ATP. That section will not alert on administrative changes to SharePoint sites. Alerts then creating a New Alert Policy is the solution. You can categories the created alert policy as "Threat Management" but that's only for viewing in the alerts section as a category of alert.
upvoted 1 times
...
VTHAR
4 years, 8 months ago
The answer is "B. No". It doesn't meet the goal. Alert policy and threat management policy are different.
upvoted 2 times
TimurKazan
3 years, 10 months ago
when you create alert policy, you also choose category of it. So, you can choose threat management policy with required settings
upvoted 1 times
...
...
Benjam
4 years, 10 months ago
A is Correct We can create a threat management policy to alert us when the sharing policy is changed. Create a new Alert policy > under Category select Threat Management > under `Activity is' scroll down to the `Site administration activities' and select `Changed a sharing policy'.
upvoted 1 times
...
Benjam
4 years, 10 months ago
Given answer is correct A We can create a threat management policy to alert us when the sharing policy is changed. Create a new Alert policy > under Category select Threat Management > under `Activity is' scroll down to the `Site administration activities' and select `Changed a sharing policy'.
upvoted 1 times
...
shark1
5 years ago
Once in a while, it's all No in this series question.
upvoted 4 times
...
saran1987
5 years ago
They didnt provide the correct answer. The corract answer is creating a alert policy in Security in compliance. SCC - > Alerts -> Alert Policies -> New Alert Policy -> (Category: Information Governance) -> Activity: Site Administration Activity -> Changed a Sharing policy
upvoted 6 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...