Exam MS-102 topic 1 question 16 discussion

Remove a user from the Restricted entities page in the Microsoft 365 Defender portal In the Microsoft 365 Defender portal at https://security.microsoft.com, go to Email & collaboration > Review > Restricted entities. Or, to go directly to the Restricted entities page, use https://security.microsoft.com/restrictedentities. https://learn.microsoft.com/en-us/microsoft-365/security/office-365-security/removing-user-from-restricted-users-portal-after-spam?view=o365-worldwide

In the Microsoft 365 Defender portal at https://security.microsoft.com, go to Email & collaboration > Review > Restricted entities

Explanation: When a user exceeds the sending limits in Microsoft 365 (such as sending too many emails in a short time), Exchange Online automatically places the user on the Restricted entities list. To remove a user from the Restricted entities list, you must go to the Exchange admin center (EAC) and manually unblock the user. This is because the restriction is specific to Exchange Online mail flow (email sending), not a broader security/compliance action handled by Defender, Entra, or Purview. ✅ Steps (briefly): Go to Exchange admin center. Navigate to Mail flow > Restricted entities. Find User1 and remove them from the restricted list. _____________________________________________________________

A. the Exchange admin center

D is correct. Had to do this multiple times with our scanner account.

Was in Exam 27-6-24

MSFT Defender Portal > Restricted Entities

Copilot says D. To remove User1 from the Restricted entities list in a Microsoft 365 E5 subscription, you should use: D. the Microsoft 365 Defender portal In the Microsoft 365 Defender portal, you can remove a user from the Restricted entities page. This action is typically necessary when a user is restricted from sending email because they have exceeded the outbound sending limits1.

From the Book To remove a user from the Restricted Entities page, perform the following steps: 1. In the Microsoft 365 Defender portal, navigate to Email & Collaboration and select Review > Restricted Entities. 2. On the Restricted Entities page, select the user to unblock by selecting the checkbox for the entity and then selecting the Unblock action that appears on the page. 3. In the Unblock User flyout menu, verify that the account isn’t compromised and

D is correct

https://learn.microsoft.com/en-us/microsoft-365/security/office-365-security/removing-user-from-restricted-users-portal-after-spam?view=o365-worldwide

With this specifically, think of where Anti-spam policies are setup. This is normally where you set a daily limit / hourly limit on emails. Once you've got that, most of these questions will always point to the same place.

D is the correct answer. "In the Microsoft 365 Defender portal at https://security.microsoft.com, go to Email & collaboration > Review > Restricted entities. Or, to go directly to the Restricted entities page, use https://security.microsoft.com/restrictedentities" ref: https://learn.microsoft.com/en-us/microsoft-365/security/office-365-security/removing-user-from-restricted-users-portal-after-spam?view=o365-worldwide

D is correct

https://learn.microsoft.com/en-us/microsoft-365/security/office-365-security/removing-user-from-restricted-users-portal-after-spam?view=o365-worldwide