Exam SC-300 topic 3 question 20 discussion

High download rate You can set your activity policy so that you receive an alert when there has been an unexpected or uncharacteristic level of downloading activity. To configure this sort of policy, under Rate parameters, choose the parameters to trigger the alert. https://learn.microsoft.com/en-us/defender-cloud-apps/user-activity-policies#custom-alerts

Checked MDE portal. This is activity policy

The correct answer is B. activity policy. Activity policies in Microsoft Defender for Cloud Apps allow you to detect and respond to risky behavior in your cloud apps. You can use an activity policy to be notified if a user downloads more than 50 files in one minute from Site1.

Correct answer: B Activity policy for Mass download by a single user https://learn.microsoft.com/en-us/defender-cloud-apps/policy-template-reference#policy-template-highlights

C. File policy: File policies in Microsoft Defender for Cloud Apps allow you to define rules and conditions related to file activities, such as uploads, downloads, and sharing. You can set up a file policy to monitor and alert on specific file-related actions, like the number of files downloaded in a given time frame. In this case, you want to monitor the download activity from Site1, so a file policy is the appropriate choice.

B. activity policy

B. activity policy

Custom alerts in Activity policies https://learn.microsoft.com/en-us/defender-cloud-apps/user-activity-policies

B is correct