Exam MS-101 topic 2 question 2 discussion

From the Security & Compliance admin center, create an alert policy. D. Create alert policy > Category: Threat management > Activity: "Office 365 detected malware in an email message before or after it was delivered."

The answer is D. S&C Alert policies > category mail flow > detected malware in file.

D. Is the correct answer Microsoft Security/Defender Portal > Email & Collaboration > New Alert Policy > Severity = Any H/M/L > Category = Mailflow -> Activity is- Detected Malware in Email message

answer is D - microsoft portal is changing daily, and i wonder when you guys got the latest testging

Alert- Polcies-Email messages containing malware removed after delivery Generates an alert when any messages containing malware are delivered to mailboxes in your organization. If this event occurs, Microsoft removes the infected messages from Exchange Online mailboxes using Zero-hour auto purge. This policy has an Informational severity setting and automatically triggers automated investigation and response in Office 365. https://docs.microsoft.com/en-us/microsoft-365/compliance/alert-policies?view=o365-worldwide

Tested this in my tenant. D is in fact the correct answer. S&C Center > Alert Policies > Create > Name your alert > Create alert settings > Activity is > Detected malware in a file...

I think B D for : Office 365 detected malware in either a SharePoint or OneDrive file.

From the Exchange admin center, create an anti-malware policy.