Microsoft 365 Administrator — Question 325
You have a Microsoft 365 E5 subscription.
You need to be alerted when Microsoft 365 Defender detects high-severity incidents.
What should you use?
Answer options
- A. a custom detection rule
- B. a threat policy
- C. an alert policy
- D. a notification rule
Correct answer: D
Explanation
The correct answer is D, as a notification rule specifically triggers alerts for high-severity incidents in Microsoft 365 Defender. Options A and C, while related to detection and alerting, do not directly provide the alert functionality required. Option B, the threat policy, is more about managing threats rather than alerting on detected incidents.