Microsoft 365 Messaging — Question 59

You have a Microsoft 365 subscription that contains two users named User1 and User2.

User1 reports to have received a suspicious email message that appears to have come from User2.

You identify that the message was sent by an external user impersonating User2.

You need to block email that contains the email address of an impersonated sender.

What should you configure?

Answer options

• A. a Tenant Allow/Block Lists rule
• B. an anti-phishing policy
• C. an anti-spam policy
• D. an Enhanced filtering rule

Correct answer: B

Explanation

The correct answer is B, as an anti-phishing policy is specifically designed to protect against impersonation attacks by blocking emails that appear to come from a trusted source but are actually from an external sender. The other options, while related to email security, do not specifically address the issue of impersonation in the same way as an anti-phishing policy does.