SC-100 Certification Practice Question #85

Question

You have a Microsoft 365 E5 subscription that uses Microsoft Exchange Online.

You need to recommend a solution to prevent malicious actors from impersonating the email addresses of internal senders.

What should you include in the recommendation? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Accepted Answer

The requirement is to stop malicious actors from impersonating the email addresses of *internal senders*. MS Learn states that user impersonation protection — adding internal/external sender addresses to be protected from being impersonated as message senders — is an exclusive setting of anti-phishing policies in Microsoft Defender for Office 365 (basic EOP anti-phishing lacks impersonation protection). That uniquely identifies the Service as Microsoft Defender for Office 365 and the Policy type as Anti-phishing. Community signal is overwhelming and unanimous (18 + 9 + 4 👍), with no dissent.

More SC-100 practice questions