Exam MS-203 topic 4 question 102 discussion

To block email that contains the email address of an impersonated sender in a Microsoft 365 subscription that contains two users named User1 and User2, you should configure an anti-phishing policy1. Anti-phishing policies in Microsoft Defender for Office 365 provide impersonation protection that can help prevent email messages from senders who are impersonating a user or domain within your organization1. The other options, creating a Tenant Allow/Block Lists rule, an Enhanced filtering rule or adding an entry to the IP Block List for the default connection filter policy, are not mentioned as options for blocking email that contains the email address of an impersonated sender.

B is correct

I’d to with A as it says “ You need to block email that contains the email address of an impersonated sender” So it’s just about blocking the sender.