Exam MS-102 topic 1 question 189 discussion

I think "Onedrive and Sharepoint Only" and "12"

Should Be Onedrive and Sharepoint Only and 20. In this question about ms-100 its the same question with other values... https://www.examtopics.com/discussions/microsoft/view/48787-exam-ms-101-topic-2-question-64-discussion/

correct answers 1: Sharepoint or onedrive 2: 12

share point and one drive only, because exhange has his own malware filter 1 trigger every 2 hours. in 24 hours can trigger only 12.

Answer1: Sharepoint or OneDrive Answer2: 12 (24 hours = 12 alerts, 1 alert per 2 hours)

I created an Alert Policy. Detected Malware in File = SharePoint or OneDrive Threshold is when the volume of matched activities reach's a Threshold trigger an alert In this case 20 activities within with in 2 hours = Alert created Daily notification limit = Number of alerts that can be created

Alert aggregation When multiple events that match the conditions of an alert policy occur with a short period of time, they are added to an existing alert by a process called alert aggregation. When an event triggers an alert, the alert is generated and displayed on the Alerts page and a notification is sent. If the same event occurs within the aggregation interval, then Microsoft 365 adds details about the new event to the existing alert instead of triggering a new alert. The goal of alert aggregation is to help reduce alert "fatigue" and let you focus and take action on fewer alerts for the same event.

https://learn.microsoft.com/en-us/purview/alert-policies