Question 141 · 141 in bank
You have a Microsoft 365 subscription that uses Microsoft Purview Insider Risk Management. The subscription has a policy named Policy1 that detects potential insider risks based on exfiltration activities. You discover multiple high-severity alerts for Policy1. When you review the alerts, you discover that the activities that triggered alerts have a low-risk score. You need to ensure that you only receive high-severity alerts for activities that have a high-risk score. What should you modify in Policy1?
Show answer
Answer: C