Exam MS-201 topic 2 question 28 discussion

Actual exam question from Microsoft's MS-201

Question #: 28
Topic #: 2

You have a Microsoft 365 subscription that uses a default domain named contoso.com.
Users report that email messages from a domain named fabrikam.com are identified as spam even though the messages are legitimate.
You need to prevent messages from fabrikam.com from being identified as spam.
What should you do?

A. Modify the IP Allow list of a connection filter policy.
B. Edit the default mail flow rule to bypass the spam filter.
C. Create a new remote domain.
D. Create a new malware filter policy.

Show Suggested Answer

Suggested Answer: A 🗳️

by nExoR at April 19, 2020, 12:28 p.m.

Comments

Submit Cancel

adaniel89

4 years, 2 months ago

A. is the closest answer, however, the exact answer should be "Spam filter Policy" where you add fabrikam.com domain.

upvoted 1 times

...

donathon

4 years, 4 months ago

A The available safe sender lists are described in the following list in order from most recommended to least recommended: • Mail flow rules • Outlook Safe Senders • IP Allow List (connection filtering) • Allowed sender lists or allowed domain lists (anti-spam policies) https://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/create-safe-sender-lists-in-office-365?view=o365-worldwide

upvoted 2 times

...

jet_the_great

5 years ago

The answer is B. Mail flow rules can be used to set the SCL of email, which determines if an email is considered spam or not. Reference: https://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/use-mail-flow-rules-to-set-the-spam-confidence-level-scl-in-messages?view=o365-worldwide

upvoted 4 times

JFMcFadden

4 years, 11 months ago

While factually correct, B states the "default mail flow rule", there is no such thing as a default mail flow rule. A is the correct answer.

upvoted 3 times

...

nExoR

5 years, 1 month ago

IP rule may not be even possible - e.g. customer has EXO. answer is C

upvoted 2 times

nExoR

5 years, 1 month ago

..meant to be D - antimalware (antispam) policy sorry... remote domains are for a bit different purpose.

upvoted 3 times

...

ly01

5 years ago

It's not true. answer is correct. You can indeed modify the Connection FIlter Policy of EOP via Set-HostedConnectionFilterPolicy "Default" -IPAllowList 192.168.1.10,192.168.1.23 -IPBlockList 10.10.10.0/25,172.17.17.0/24

upvoted 3 times

...