exam questions

Exam MS-101 All Questions

View all questions & answers for the MS-101 exam

Exam MS-101 topic 2 question 1 discussion

Actual exam question from Microsoft's MS-101
Question #: 1
Topic #: 2
[All MS-101 Questions]

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have a Microsoft 365 subscription.
You discover that some external users accessed content on a Microsoft SharePoint site. You modify the SharePoint sharing policy to prevent sharing outside your organization.
You need to be notified if the SharePoint sharing policy is modified in the future.
Solution: From the Security & Compliance admin center, you create a threat management policy.
Does this meet the goal?

  • A. Yes
  • B. No
Show Suggested Answer Hide Answer
Suggested Answer: B 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Uglydotcom
Highly Voted 5 years, 5 months ago
Correct is B. From the Security & Compliance admin center, Alerts, you create a new alert policy. https://docs.microsoft.com/en-us/microsoft-365/compliance/alert-policies
upvoted 68 times
LoremanReturns
3 years, 9 months ago
I confirm, tested in my lab
upvoted 3 times
...
minajahan
5 years, 1 month ago
This is right. I just tried it with my free trial subscription.
upvoted 6 times
...
Takloy
4 years, 2 months ago
Agree and tested!
upvoted 5 times
...
...
itmp
Highly Voted 4 years, 11 months ago
It is an ALERT policy with Threat Management as category - so if it's a typo, than yes, otherwise, no. SCC-> Alerts -> New alert policy -> Threat Management-> Activity is -> Changed a sharing policy.
upvoted 18 times
Mary_Yvette
4 years, 9 months ago
The answer is No. If I am to create this alert I will categorize this as Data Lost Prevention. Threat Management policies are different from the alert needed here.
upvoted 2 times
...
...
Moderator
Most Recent 2 years, 7 months ago
Selected Answer: B
B is correct, decent explanations can be found here already.
upvoted 2 times
...
L33D
2 years, 10 months ago
Still valid, on exam Jun 25, 2022
upvoted 2 times
...
Rickert
3 years ago
Selected Answer: B
It is an alert
upvoted 2 times
...
JamesM9
3 years, 1 month ago
I have tested this today and from the S&C: 1. S&C center 2. Policies and rules 3. Alert Policy 4. New alert policy 5. Name/assign severity 6. Select category - Threat Management 7. Select Activity - Site Administrations/Changed a Sharing Policy 8. Set alert settings (Every time an activity matches the rule) 9. Set Recipients 10. No limit 11. Create "An administrator changed a SharePoint sharing policy by using the Office 365 Admin center, SharePoint admin center, or SharePoint Online Management Shell. Any change to the settings in the sharing policy in your organization will be logged. The policy that was changed is identified in the ModifiedProperty field property when you export the search results". As a result of this, I managed to create an alert policy through the S&C center for when the SharePoint sharing policy is modified. The answer is A - Yes.
upvoted 2 times
...
Durden871
3 years, 1 month ago
From Udemy: Explanation We can create a threat management policy to alert us when the sharing policy is changed. Create a new Alert policy > under Category select Threat Management > under ג€˜Activity isג€™ scroll down to the ג€˜Site administration activitiesג€™ and select ג€˜Changed a sharing policyג€™.
upvoted 1 times
Durden871
3 years, 1 month ago
Answer, to them, was "Yes".
upvoted 1 times
...
...
Glorence
3 years, 2 months ago
still valid, it was in my exam last Feb 5, 2022
upvoted 2 times
Kalzonee3611
3 years, 2 months ago
Thank you
upvoted 1 times
...
...
Panku
3 years, 3 months ago
Answer: B
upvoted 2 times
...
Coulibaly
3 years, 3 months ago
Selected Answer: A
We can create a threat management policy to alert us when the sharing policy is changed. Create a new Alert policy > under Category select Threat Management > under ‘Activity is’ scroll down to the ‘Site administration activities’ and select ‘Changed a sharing policy’
upvoted 1 times
...
Coulibaly
3 years, 3 months ago
I think Answer is A We can create a threat management policy to alert us when the sharing policy is changed. Create a new Alert policy > under Category select Threat Management > under ‘Activity is’ scroll down tothe ‘Site administration activities’ and select ‘Changed a sharing policy’
upvoted 1 times
...
tf444
3 years, 4 months ago
Yes: We can create a threat management policy to alert us when the sharing policy is changed. Create a new Alert policy > under Category select Threat Management > under 'Activity is' scroll down to the 'Site administration activities' and select 'Changed a sharing policy'.
upvoted 1 times
...
UWSFish
3 years, 8 months ago
I think of the context of the three questions A is the answer that will get marked correct. Weather the questions has been worded as well as it might have been is up for debate.
upvoted 1 times
...
Domza
3 years, 8 months ago
Please dont be confused with Threat Management "Category" This bad boy is in Alerting Policy.
upvoted 2 times
...
balajim212
3 years, 9 months ago
Answer is B. No - Need to use Alert policies
upvoted 2 times
...
chenepon
3 years, 10 months ago
Corresct A: test in my tenant dev
upvoted 1 times
...
Eltooth
3 years, 11 months ago
NO NO NO
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago