Exam SC-300 All Questions

View all questions & answers for the SC-300 exam

Exam SC-300 topic 3 question 20 discussion

Actual exam question from Microsoft's SC-300

Question #: 20
Topic #: 3

You have a Microsoft 365 E5 subscription that contains a Microsoft SharePoint Online site named Site1.

You need to be notified if a user downloads more than 50 files in one minute from Site1.

Which type of policy should you create in the Microsoft Defender for Cloud Apps portal?

A. session policy
B. activity policy
C. file policy
D. anomaly detection policy

Show Suggested Answer

Suggested Answer: B 🗳️

by MRDP1 at Jan. 21, 2023, 7:48 a.m.

Comments

Submit Cancel

OrangeSG

Highly Voted 7 months, 3 weeks ago

Selected Answer: B

High download rate You can set your activity policy so that you receive an alert when there has been an unexpected or uncharacteristic level of downloading activity. To configure this sort of policy, under Rate parameters, choose the parameters to trigger the alert. https://learn.microsoft.com/en-us/defender-cloud-apps/user-activity-policies#custom-alerts

upvoted 5 times

...

Obi_Wan_Jacoby

Most Recent 2 months, 2 weeks ago

Selected Answer: B

Answer B as others stated

upvoted 1 times

Obi_Wan_Jacoby

2 months, 2 weeks ago

B. activity policy

upvoted 1 times

...

JohnnyChimpo

3 months, 1 week ago

Selected Answer: B

Checked MDE portal. This is activity policy

upvoted 1 times

...

haazybanj

7 months, 4 weeks ago

Selected Answer: B

The correct answer is B. activity policy. Activity policies in Microsoft Defender for Cloud Apps allow you to detect and respond to risky behavior in your cloud apps. You can use an activity policy to be notified if a user downloads more than 50 files in one minute from Site1.

upvoted 4 times

...

0byte

8 months ago

Selected Answer: B

Correct answer: B Activity policy for Mass download by a single user https://learn.microsoft.com/en-us/defender-cloud-apps/policy-template-reference#policy-template-highlights

upvoted 2 times

...

Jzx

9 months, 3 weeks ago

Selected Answer: C

C. File policy: File policies in Microsoft Defender for Cloud Apps allow you to define rules and conditions related to file activities, such as uploads, downloads, and sharing. You can set up a file policy to monitor and alert on specific file-related actions, like the number of files downloaded in a given time frame. In this case, you want to monitor the download activity from Site1, so a file policy is the appropriate choice.

upvoted 1 times

rvln7

4 months ago

file policy focuses on file attributes (e.g., sensitivity labels, sharing status) and governance actions, not on tracking the frequency of user actions like downloads over time.

upvoted 1 times

...

Julesy

8 months, 4 weeks ago

https://learn.microsoft.com/en-us/defender-cloud-apps/data-protection-policies#policies There is no mention of downloads. Don't know where you got that.

upvoted 2 times

...