MS-102 Exam Dumps - Microsoft 365 Certified: Enterprise Administrator Expert Questions and Answers

Box 1: Anti-malware

Customize the common attachments filter.

See step 5 below.

1. Use the Microsoft Defender XDR portal to create anti-malware policies

In the Microsoft Defender XDR portal at https://security.microsoft.com, go to Email & Collaboration > Policies & Rules > Threat policies > Anti-Malware in the Policies section. To go directly to the Anti-malware page, use https://security.microsoft.com/antimalwarev2

2. On the Anti-malware page, select Create to open the new anti-malware policy wizard.

On the Name your policy page, configure these settings:

Name: Enter a unique, descriptive name for the policy.

Description: Enter an optional description for the policy.

3. When you ' re finished on the Name your policy page, select Next.

4. On the Users and domains page, identify the internal recipients that the policy applies to (recipient conditions)

5. On the Protection settings page, configure the following settings:

Protection settings section:

Enable the common attachments filter: If you select this option, messages with the specified attachments are treated as malware and are automatically quarantined. You can modify the list by clicking Customize file types and selecting or deselecting values in the list.

6. Etc.

Box 2: Anti-phishing

Enable impersonation protection for sender domains.

Anti-phishing policies in Microsoft 365

The high-level differences between anti-phishing policies in EOP and anti-phishing policies in Defender for Office 365 are described in the following table:

Statement

Answer

A user in contoso.com can send a guest invitation to a user that has an email address of user1@fabrikam.com.

No

A user in contoso.com can send a guest invitation to a user that has an email address of user1@adatum.com.

Yes

A user in contoso.com can accept a guest invitation from a user that has an email address of user1@fabrikam.com.

No

This question is testing B2B collaboration, not B2B direct connect. A guest invitation creates or uses a B2B collaboration guest relationship. Microsoft states that cross-tenant access settings determine both inbound access by external users to your resources and outbound access by your users to external organizations. Inbound access controls whether users from an external Microsoft Entra organization can access resources in your tenant, while outbound access controls whether your users can access resources in an external organization. Microsoft also states that default cross-tenant access settings apply to all external organizations unless organization-specific settings exist.

For fabrikam.com, organization-specific settings override the default settings. Because Inbound B2B collaboration is All blocked, a Contoso user cannot invite a Fabrikam user as a guest into Contoso. Therefore, the first statement is No. For adatum.com, no organization-specific blocking rule is shown, so the default tenant setting applies; B2B collaboration is enabled by default for external Microsoft Entra organizations, so the second statement is Yes.

For the third statement, a Contoso user accepting an invitation from Fabrikam means the Contoso user is accessing Fabrikam as an external guest, which uses Outbound B2B collaboration from Contoso to Fabrikam. Since outbound B2B collaboration for fabrikam.com is All blocked, the answer is No.