Exam MS-102 topic 1 question 365 discussion

Actual exam question from Microsoft's MS-102

Question #: 365
Topic #: 1

HOTSPOT
-

Your company has offices in Montreal, Seattle, and New York City.

You have a Microsoft 365 E5 subscription that contains the users shown in the following table.

The offices have the IP addresses shown in the following table.

From Microsoft Defender for Cloud Apps, you create the activity policy shown in the following exhibit.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Show Suggested Answer

Suggested Answer:

by ovandermeyden at Oct. 30, 2024, 9:37 p.m.

Comments

Submit Cancel

hola1010

Highly Voted 6 months ago

N-Y-N Montreal is a "maybe" because of the subnet mask mismatch in the config. Policy matches Seattle IP. 1 download per second for 2 mins surpasses the 30 threshold in the policy for 1 min. NY doesn't match policy anywhere.

upvoted 11 times

fabiomartinsnet

1 month ago

The key in this question is the "raw" ip address... is the real ip address not the nat ip address. So YNN is correct.

upvoted 3 times

004b54b

2 weeks, 6 days ago

https://stackoverflow.com/questions/68467251/what-is-the-difference-between-request-ip-and-request-raw-ip-in-fastify not exactly a Microsoft case but clear explanation: "There is a difference only if your server runs behind a proxy/balancer. Let's make an example: Client IP: 123.123.123.123 Balancer IP: 10.10.10.10 The request.raw.connection.remoteAddress will be 10.10.10.10 The request.ip will be 123.123.123.123 (only if trustProxy option is enabled) or it will ba as the raw one"

upvoted 1 times

...

BJS78

Most Recent 3 months, 2 weeks ago

Maybe a typo in the "Activities". If user comes from 10.10.0.X --> YES, If from 10.10.1_255.X --> NO

upvoted 1 times

...

ovandermeyden

6 months ago

Check the Montreal ip address subnet mask vs the given ip address in Activities matching... I think it is NO