Microsoft 365 Mobility and Security (legacy) — Question 106

You have a Microsoft 365 E5 subscription.

You need to be alerted when Microsoft 365 Defender detects high-severity incidents.

What should you use?

Answer options

• A. a threat policy
• B. a custom detection rule
• C. an alert policy
• D. a notification rule

Correct answer: D

Explanation

The correct answer is D, as notification rules are specifically designed to alert users about incidents based on certain criteria, such as severity. Options A and B do not provide the necessary alerting mechanism, while C refers to general alerts rather than the specific notifications needed for high-severity incidents.