exam questions

Exam MS-900 All Questions

View all questions & answers for the MS-900 exam

Exam MS-900 topic 1 question 241 discussion

Actual exam question from Microsoft's MS-900
Question #: 241
Topic #: 1
[All MS-900 Questions]

You are a Microsoft 365 administrator for a company.
You need to identify security vulnerabilities by using the Office 365 Attack Simulator.
Which three attack simulations are available? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.

  • A. Brute-force password
  • B. Cross-site scripting
  • C. Password-spray
  • D. Denial-of-service
  • E. Display name spear-phishing
Show Suggested Answer Hide Answer
Suggested Answer: ACE 🗳️
Reference:
https://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/attack-simulator

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
JayLearn2022
Highly Voted 2 years, 1 month ago
The Office 365 Attack Simulator provides various attack simulations to help administrators identify and remediate security vulnerabilities in their organization. Here are the three attack simulations available: A. Brute-force password: This attack simulation attempts to guess a user's password by repeatedly trying different combinations of characters until the correct password is found. C. Password-spray: This attack simulation attempts to use a small number of commonly used passwords to gain access to multiple accounts. E. Display name spear-phishing: This attack simulation sends a phishing email to targeted users that appears to be from someone they know, but the email address is spoofed. The goal is to trick users into divulging sensitive information, such as usernames and passwords.
upvoted 6 times
JayLearn2022
2 years, 1 month ago
Note that Denial-of-service (DoS) and Cross-site scripting (XSS) are not available as attack simulations in the Office 365 Attack Simulator. DoS is a type of attack that attempts to overwhelm a server or network with traffic to render it unusable, while XSS is a type of attack that injects malicious code into a web page viewed by other users.
upvoted 4 times
...
...
RayL2nd
Most Recent 10 months ago
Just a question, has anyone used the AI tools to check these answers lately?
upvoted 1 times
...
Pand2
1 year, 1 month ago
Now called Attack simulation training
upvoted 1 times
...
jim85
2 years, 3 months ago
https://www.enowsoftware.com/solutions-engine/m365-exchange-online-center/office-365-attack-simulator - according to this the answers are correct
upvoted 1 times
...
magdyip
2 years, 10 months ago
Is this Dump Still valid ?
upvoted 2 times
wando5000
2 years, 9 months ago
I have been through the links and cant see any reference to Brute-force password or Password-spray. But 'spear-phishing' is an available option.
upvoted 3 times
...
...
syu31svc
3 years, 10 months ago
https://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/attack-simulator?view=o365-worldwide ACE are the right options
upvoted 3 times
...
NoOneAnon
3 years, 12 months ago
Apparently the Attack Simulator referenced in the question is now retired. It is now called Attack simulation training at https://security.microsoft.com/attacksimulator?viewid=overview. No idea what that means for the test.
upvoted 4 times
...
Gerardo1971
4 years, 1 month ago
Correct answer
upvoted 3 times
...
TMW
4 years, 1 month ago
this is correct, just posted 3/17/21: https://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/attack-simulator?view=o365-worldwide
upvoted 1 times
...
Lauryss
4 years, 5 months ago
ACE is correct
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago