Exam MS-101 topic 1 question 95 discussion

Actual exam question from Microsoft's MS-101

Question #: 95
Topic #: 1

HOTSPOT
-

You have a Microsoft 365 E5 subscription that uses Microsoft Defender for Endpoint and contains the devices shown in the following table.

Defender for Endpoint has the device groups shown in the following table.

You create an incident email notification rule configured as shown in the following table.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Show Suggested Answer

Suggested Answer:

by IPalot at Jan. 4, 2023, 6:34 p.m.

Comments

Submit Cancel

IPalot

Highly Voted 2 years, 6 months ago

No - High severity Alert. No - Doesn't have 'Device' in name Yes - Has OS name 'Andriod' and Tag contains 'Inventory'

upvoted 12 times

...

ChizzyO

Most Recent 2 years ago

Given answer is correct No - Device 1 is included in the matching rule but the setting for the alert is low not high, therefore no email is sent No - Computer 1 does not meet the matching rule as it does not start with device in the name Yes - Device 3 is included in the matching rule and meets the settings for the email notification

upvoted 1 times

...