Exam MS-500 topic 2 question 7 discussion

There is no correct answer here. You need MFA for the account you will be doing the simulation with.

becuase the research group has alraedy an exchange online mailbox and you are only targetng the research department so you need to activate mfa for the research deparment

To model a spear-phishing attack that targets the Research group members using the Microsoft Office 365 Attack simulator, the first step you should take is: C. Enable MFA for the Research group members. Enabling multi-factor authentication (MFA) for the Research group members adds an extra layer of security to their mailbox accounts and helps protect against unauthorized access, including potential spear-phishing attacks. By enabling MFA, users are required to provide additional verification, such as a code sent to their mobile device or biometric authentication, when signing in to their accounts. Before running the Attack simulator, it's important to ensure that the target users, in this case, the members of the Research group, have MFA enabled. This step enhances their security posture and helps evaluate the effectiveness of their MFA implementation in defending against spear-phishing attacks.

All others are wrong

Valid on28/01/23

C Because a spearphising campaign. You want them to not only enter the creds, but MFA aswell. MFA is part of Speaphising built in campaign.

There is literally no correct answer for this. MFA is only required for the admin when he wants to launch a campaign, not required for the users. Attack simulator is only for the research group so no point in changing the exec mailboxes. The rest of the answers is also incorrect... Maybe this is an old question? https://learn.microsoft.com/en-us/microsoft-365/security/office-365-security/attack-simulation-training-get-started?view=o365-worldwide

The right answer is D. Attack Simulator can only be used for mailboxes in Exchange Online.