Microsoft 365 Administrator — Question 162

You have a Microsoft 365 E5 subscription.

From the Microsoft 365 Defender portal, you review your company’s Microsoft Secure Score.

You discover a large number of recommended actions.

You need to ensure that the actions can be filtered based on specific department names.

What should you create first?

Answer options

• A. a dynamic security group
• B. a tag
• C. an administrative unit
• D. a custom detection rule

Correct answer: B

Explanation

Creating a tag is the correct first step because it allows for categorization of actions based on department names, enabling easier filtering. The other options, like dynamic security groups or administrative units, do not specifically provide the tagging functionality needed for this task, and custom detection rules are irrelevant to filtering actions based on departments.