exam questions

Exam MS-101 All Questions

View all questions & answers for the MS-101 exam

Exam MS-101 topic 2 question 48 discussion

Actual exam question from Microsoft's MS-101
Question #: 48
Topic #: 2
[All MS-101 Questions]

You have a Microsoft 365 E5 subscription that uses Azure Advanced Threat Protection (ATP).
You need to create a detection exclusion in Azure ATP.
Which tool should you use?

  • A. the Security & Compliance admin center
  • B. Microsoft Defender Security Center
  • C. the Microsoft 365 admin center
  • D. the Azure Advanced Threat Protection portal
  • E. the Defender for Cloud Apps portal
Show Suggested Answer Hide Answer
Suggested Answer: B 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
RenegadeOrange
Highly Voted 2 years, 7 months ago
In the old portal.atp.azure.com which still exists there is an exclusions section but it's limited to certain types of exclusions and you can add a user, pc or IP under those. The new place is now in security.microsoft.com (Microsoft 365 Defender) under Settings...Identities... Global excluded entities There you can just add a User/Domain/Device or IP as a direct global exclusion.
upvoted 6 times
...
EliasMartinelli
Most Recent 2 years, 4 months ago
Selected Answer: B
old question new is the MD portal. B is right
upvoted 2 times
...
sliix
2 years, 6 months ago
Selected Answer: B
See Fefe_ES
upvoted 3 times
...
Fefe_ES
2 years, 7 months ago
Old. Now is on MD portal: https://learn.microsoft.com/en-us/microsoft-365/security/defender-identity/exclusions?view=o365-worldwide
upvoted 3 times
...
Moderator
2 years, 7 months ago
Selected Answer: B
My guess would be B: https://docs.microsoft.com/en-us/defender-for-identity/exclusions
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago