Microsoft Cybersecurity Architect — Question 33

You have a Microsoft 365 subscription that contains 1,000 Microsoft Exchange Online mailboxes.

Incoming email from the internet is scanned for security threats by using a third-party cloud service.

You are evaluating whether to replace the third-party service with Microsoft Defender for Office 365.

What should you modify to ensure that all the incoming email is scanned by Defender for Office 365 only?

Answer options

• A. the accepted domains in Exchange Online
• B. the DNS records
• C. the Exchange Online transport rule
• D. the Exchange Online connectors

Correct answer: B

Explanation

To ensure that all incoming email is scanned solely by Microsoft Defender for Office 365, you need to modify the DNS records. This change will direct incoming emails through Defender instead of the third-party service. The other options, such as accepted domains and connectors, do not directly control the routing of incoming emails for scanning by Defender.