Exam MS-203 topic 4 question 102 discussion

Actual exam question from Microsoft's MS-203

Question #: 102
Topic #: 4

You have a Microsoft 365 subscription that contains two users named User1 and User2.

User1 reports to have received a suspicious email message that appears to have come from User2.

You identify that the message was sent by an external user impersonating User2.

You need to block email that contains the email address of an impersonated sender.

What should you configure?

A. a Tenant Allow/Block Lists rule
B. an anti-phishing policy
C. an anti-spam policy
D. an Enhanced filtering rule

Show Suggested Answer

Suggested Answer: B 🗳️

by Hajrobitanga at May 19, 2023, 10:50 a.m.

Comments

Submit Cancel

Hajrobitanga

Highly Voted 1 year, 1 month ago

Selected Answer: B

To block email that contains the email address of an impersonated sender in a Microsoft 365 subscription that contains two users named User1 and User2, you should configure an anti-phishing policy1. Anti-phishing policies in Microsoft Defender for Office 365 provide impersonation protection that can help prevent email messages from senders who are impersonating a user or domain within your organization1. The other options, creating a Tenant Allow/Block Lists rule, an Enhanced filtering rule or adding an entry to the IP Block List for the default connection filter policy, are not mentioned as options for blocking email that contains the email address of an impersonated sender.

upvoted 5 times