Exam MS-102 topic 1 question 297 discussion

Actual exam question from Microsoft's MS-102

Question #: 297
Topic #: 1

HOTSPOT
-

You have a Microsoft 365 E5 subscription.

You are investigating a suspicious email message that generated alerts in the Microsoft Defender portal.

You need to examine the email message header and submit the message to Microsoft for review.

Which two settings should you use? To answer, select the appropriate settings in the answer area.

NOTE: Each correct selection is worth one point.

Show Suggested Answer

Suggested Answer:

by GetEsn at Oct. 16, 2024, 12:06 p.m.

Comments

Submit Cancel

GetEsn

Highly Voted 6 months ago

I think it shoulb be: Analysis Take Action : https://learn.microsoft.com/en-us/defender-office-365/submissions-admin

upvoted 8 times

Ody

5 months, 1 week ago

You are correct. Analysis allows you to see the header information Take action allows you to "Submit to Microsoft for Review"

upvoted 2 times

...

skids222

Most Recent 4 days, 11 hours ago

What the Analysis view shows: - Message ID - Sender IP and domain - Authentication results (SPF, DKIM, DMARC) - Detection verdicts (Spam, Phish, etc.) - Policy matches - Attachments and URLs - Partial header-related metadata (e.g., X-MS-Exchange-Organization-* fields in summary form) What it does not show: - The full raw message header — you don’t get the complete SMTP headers as-is. For full investigation, you still need: Email preview → to access and copy full message headers

upvoted 1 times

...

justITtopics

2 months, 3 weeks ago

I vote for Analysis, where you can see headers https://learn.microsoft.com/en-us/defender-office-365/mdo-email-entity-page#analysis-view Take Action, where you can submit to Microsoft for review https://learn.microsoft.com/en-us/defender-office-365/threat-explorer-threat-hunting#the-take-action-wizard

upvoted 1 times

...

AdamRachel

5 months, 2 weeks ago

To see the header i think you need to open Email preview no?

upvoted 3 times

...

Exam MS-102 All Questions

View all questions & answers for the MS-102 exam