Topic 1
Question #2
You need to receive a security alert when a user attempts to sign in from a location that was never used by the other users in your organization to
sign in.
Which anomaly detection policy should you use?
A. Impossible travel
B. Activity from anonymous IP addresses
C. Activity from infrequent country
D. Malware detection
Correct Answer:
C
Reference:
https://docs.microsoft.com/en-us/cloud-app-security/anomaly-detection-policy
TheMCT
Highly Voted
5months ago
Given Answer, C, is correct
upvoted 10 times
airairo
Most Recent
1month ago
the updated question is
You are configuring Microsoft Cloud App Security.
You have a custom threat detection policy based on the IP address ranges of your company's United States - based offices. You receive
many alerts related to impossible travel and sign - ins from risky IP addresses.
You determine that 99 % of the alerts are legitimate sign - ins from your corporate offices.
You need to prevent alerts for legitimate sign - ins from known locations.
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
A. Add the IP addresses to the other address range category and add a tag
B. Create an activity policy that has an exclusion for the IP addresses.
C. Increase the sensitivity level of the impossible travel anomaly detection policy
D. Override automatic data enrichment
upvoted 1 times
airairo
1month, 1week ago
similar question came in the exam is
Question#67
You are configuring Microsoft Cloud App Security.
You have a custom threat detection policy based on the IP address ranges of your company's United States - based offices. You receive
many alerts related to impossible travel and sign - ins from risky IP addresses.
You determine that 99 % of the alerts are legitimate sign - ins from your corporate offices.
You need to prevent alerts for legitimate sign - ins from known locations.
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
A. Add the IP addresses to the other address range category and add a tag
B. Create an activity policy that has an exclusion for the IP addresses.
C. Increase the sensitivity level of the impossible travel anomaly detection policy
D. Override automatic data enrichment
upvoted 1 times
ReffG
2days, 1hour ago
A and D is the correct answer
upvoted 1 times
AYap
1month, 1week ago
Is BC the correct answer?
upvoted 2 times
Justy
1month, 1week ago
please post the answer also
upvoted 1 times
ANDRESCB1988
1month, 3weeks ago
Activity from infrequent country is correct
upvoted 1 times
VIP享7折，此内容立减5.97元 
