Microsoft 365 Administrator — Question 261

You have a Microsoft 365 E5 subscription and use Microsoft Defender for Cloud Apps.

You are reviewing the activity log of the subscription.

You need to ensure that events originating from the on-premises network are categorized automatically as Administrative.

What should you create?

Answer options

• A. a critical asset classification
• B. an indicator for IP addresses
• C. an IP address range
• D. a named location

Correct answer: C

Explanation

Creating an IP address range allows you to define specific addresses from your on-premises network, enabling automatic categorization of events from those addresses as Administrative. The other options do not serve this specific purpose: a critical asset classification pertains to asset management, an indicator for IP addresses is used for detection rather than categorization, and a named location is more general and not focused on specifying IP ranges.