Question 101 · 396 in bank
HOTSPOT - You have a Microsoft 365 E5 tenant. You need to ensure that administrators are notified when a user receives an email message that contains malware. The solution must use the principle of least privilege. Which type of policy should you create, and which Microsoft Purview solutions role is required to create the policy? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.
This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.
Show the answer figure
Answer: See figure below
Explanation
The correct answer is : - Alert - Organization Management "To create alert policies, you have to be assigned the Manage Alerts role or the Organization Configuration role in the compliance portal or the Defender portal." https://learn.microsoft.com/en-us/purview/alert-policies?redirectSourcePath=%252farticle%252f8927b8b9-c5bc-45a8-a9f9-96c732e58264#how-alert-policies-work Manage Alerts role is in included in the following role groups : - Compliance Administrator - Compliance Data Administrator - Organization Management - Security Administrator - Security Operator Organization Configuration role is included in the following role groups : - Compliance Administrator - Compliance Data Administrator - Organization Management https://learn.microsoft.com/en-us/microsoft-365/security/office-365-security/scc-permissions?view=o365-worldwide Security Administrator and Organization Management are correct answers but following the principle of least privilege, the correct role group is Organization Management.
Source: Adapted from community discussion — sigvast
