Exam MS-203 topic 14 question 1 discussion

Actual exam question from Microsoft's MS-203

Question #: 1
Topic #: 14

[All MS-203 Questions]

You need to identify which users clicked the links in the phishing emails.
What should you do?

A. Run a message trace and review the results.
B. Query the mailbox audit log.
C. Use the URL trace reporting feature.
D. Review the quarantine mailbox.

Show Suggested Answer

Suggested Answer: C 🗳️
Reference:
https://docs.microsoft.com/en-us/powershell/module/exchange/get-maildetailatpreport?view=exchange-ps

by Bobalo at Aug. 5, 2021, 8 a.m.

Comments

Submit Cancel

Olaf187

Highly Voted 2 years, 1 month ago

gz to everyone who survived so far :)

upvoted 10 times

Elyamany

1 year, 7 months ago

yes, this dump has no end ^_^

upvoted 5 times

...

Given answer is correct, as per MS doc: Safe Links is a feature in Microsoft Defender for Office 365 that checks links in email messages to see if they lead to malicious web sites. When a user clicks a link in a message, the URL is temporarily rewritten and checked against a list of known, malicious web sites. Safe Links includes the URL trace reporting feature to help determine who has clicked through to a malicious web site.

upvoted 5 times