AB-900 Certification Practice Question #8

Question

Your organization has a Microsoft 365 subscription.
You need to review the impact of a recent phishing incident that targeted email users.
What should you use?

Accepted Answer

Assessing the impact of an email phishing incident — who was targeted, who clicked, the campaign's scope — is done in the **Microsoft Defender portal** (security.microsoft.com) through Threat Explorer / Real-time detections, Campaign views, and Automated Investigation and Response. The Microsoft 365 admin center, Entra admin center, and Exchange admin center handle tenant administration, identity, and mail flow respectively, none of which surface phishing investigation telemetry.

More AB-900 practice questions