Microsoft MS-900 Exam - Topic 5 Question 41 Discussion

Actual exam question for Microsoft's MS-900 exam

Question #: 41
Topic #: 5

[All MS-900 Questions]

You are a Microsoft 365 administrator for a company.

Several users report that they receive emails which have a PDF attachment. The PDF attachment launches malicious code.

You need to remove the message from inboxes and disable the PDF threat if an affected document is opened.

Which feature should you implement?

AMicrosoft Exchange Admin Center block lists

BSender Policy Framework

CAdvanced Threat Protection anti-phishing

Dzero-hour auto purge

EDKIM signed messages with mail flow rules
Explanation
Zero-hour auto purge (ZAP) is an email protection feature in Office 365 that retroactively detects and neutralizes malicious phishing, spam, or malware messages that have already been delivered to Exchange Online mailboxes. ZAP is available with the default Exchange Online Protection (EOP) that's included with any Office 365 subscription that contains Exchange Online mailboxes. ZAP doesn't work in standalone EOP environments that protect on-premises Exchange mailboxes
References:
https://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/zero-hour-auto-purge

Show Suggested Answer

Suggested Answer: D

by Merilyn at May 05, 2022, 05:09 PM

Limited Time Offer

25%

Off

Get Premium MS-900 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Hannah

4 months ago

Block lists won't help if the email's already in the inbox. ZAP is better!

upvoted 0 times

...

Jennie

4 months ago

I heard ZAP is included with EOP, so it should work for most users.

upvoted 0 times

...

Alesia

4 months ago

Wait, can ZAP really catch stuff after it's already delivered? Sounds too good to be true.

upvoted 0 times

...

Nan

5 months ago

Definitely agree, it’s super effective for these situations.

upvoted 0 times

...

Afton

5 months ago

I think zero-hour auto purge is the way to go!

upvoted 0 times

...

Jesse

5 months ago

I feel like the block lists could help, but I'm not convinced they would remove the emails after they've been delivered.

upvoted 0 times

...

Mickie

5 months ago

I practiced a similar question where ZAP was mentioned, and it seemed to be the best fit for dealing with already delivered threats.

upvoted 0 times

...

Carin

5 months ago

I'm not entirely sure, but I remember something about Advanced Threat Protection being useful for phishing. Could that apply to this situation?

upvoted 0 times

...

Renato

5 months ago

I think the zero-hour auto purge option might be the right choice here since it can retroactively remove malicious emails.

upvoted 0 times

...

Janna

5 months ago

Ah, I remember learning about this in class. Point-source pollution is from a single, direct source, like an industrial facility or a sewer pipe. I'll select C. Sewer pipe for this one.

upvoted 0 times

...

Long

5 months ago

This seems like a straightforward question about software testing and quality assurance. I'd start by carefully reading through the options and thinking about which one best addresses the issue described in the question.

upvoted 0 times

...

Abraham

5 months ago

The cloud definitely enables things like auto-scaling and leveraging cloud storage, so that's an easy one. I'm a bit confused by the "just one type of cloud storage" option though - not sure what that's getting at.

upvoted 0 times

...

Ahmed

5 months ago

"Maintenance scheme" doesn't sound right at all. I'd go with "Pass-through scheme" since it seems to relate to the transaction aspect.

upvoted 0 times

...