Exam MS-102 topic 1 question 334 discussion

Actual exam question from Microsoft's MS-102

Question #: 334
Topic #: 1

HOTSPOT
-

You have a Microsoft 365 E5 subscription that contains the users shown in the following table.

You use Microsoft Entra ID Protection.

For the Users at risk detected alerts setting, you configure the following:

• Recipient: Admin1
• Alert on user risk level at or above: Medium

User1 signs in to Microsoft 365 services and is assigned the detected risk levels shown in the following table.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Show Suggested Answer

Suggested Answer:

by Iccen at Oct. 28, 2024, 8:08 a.m.

Comments

Submit Cancel

JohnDoe47

Highly Voted 5 months, 4 weeks ago

Correct answer given Admin1 got 3 and not 2 messages. He is specifically defined as recipient. Admin2 is a Security reader. "By default users actively assigned Global Administrator, Security Administrator, or Security Reader roles are automatically added to this list if that user has a valid "Email" or "Alternate email" configured." Admin3: does not get any emails https://learn.microsoft.com/en-us/entra/id-protection/howto-identity-protection-configure-notifications#users-at-risk-detected-email

upvoted 8 times

BigO76

3 months, 3 weeks ago

agree i see it as: By the end of the day, Admin1 has received two email alerts. - No (Admin1 receives three alerts: at 2:00 PM, 3:00 PM, and 4:00 PM). By the end of the day, Admin2 has received three email alerts. - Yes (Admin2, as a Security Reader, receives the same three alerts as Admin1). By the end of the day, Admin3 has received three email alerts. No (Admin3 does not receive any alerts, as User Administrator is not included in notifications). so given answer looks right

upvoted 4 times

Krayzr

3 months, 2 weeks ago

ADmin 2: Why only 3 (not 4) alerts?

upvoted 1 times

BJS78

3 months, 2 weeks ago

Admin2 added to the alert list of the policy. Policy incudes only Medium a higher. If no alert policy, Sec Reader cannot be added to any list automatically.

upvoted 1 times

...

Iccen

Most Recent 6 months ago

I belive is :NO,NO.NO As it concern Admin 1 only