Exam MS-102 topic 1 question 373 discussion

Actual exam question from Microsoft's MS-102

Question #: 373
Topic #: 1

You have a Microsoft 365 E5 subscription and use Microsoft Defender for Cloud Apps.

You are reviewing the activity log of the subscription.

You need to ensure that events originating from the on-premises network are categorized automatically as Administrative.

What should you create?

A. a critical asset classification
B. an indicator for IP addresses
C. an IP address range
D. a named location

Show Suggested Answer

Suggested Answer: C 🗳️

by SummerK at March 16, 2025, 2:27 p.m.

Comments

Submit Cancel

fabiomartinsnet

Highly Voted 2 months, 3 weeks ago

Selected Answer: C

Named Location is used in Entra ID context, not in Defender for cloud Apps... C is correct, create ip address range and tag as "Administrative".

upvoted 7 times

...

Frank_2022

Most Recent 2 months ago

Selected Answer: D

IP address range is part of named location.

upvoted 2 times

...

SummerK

3 months, 2 weeks ago

Selected Answer: D

The correct answer is D. a named location. In Microsoft Defender for Cloud Apps, a "named location" is used to define trusted or untrusted IP address ranges. This can be applied to categorize activity originating from specific networks, such as your on-premises network, as "Administrative" based on IP address. By defining a named location for your on-premises network, you can automatically classify activities originating from that network. So, you should create a named location and associate it with your on-premises network's IP range.

upvoted 1 times

fabiomartinsnet

2 months, 3 weeks ago

Named Location is used in Entra ID context, not in Defender for cloud Apps... C is correct, create ip address range and tag as "Administrative".

upvoted 3 times

DikSoft

2 months, 2 weeks ago

Sure, yes. https://learn.microsoft.com/en-us/defender-cloud-apps/ip-tags

upvoted 3 times

...