MENU
You have a Microsoft 365 subscription. The subscription uses Microsoft 365 Defender and has data loss prevention (DLP) policies that have aggregated alerts configured.
You need to identify the impacted entities in an aggregated alert.
What should you review in the DIP alert management dashboard of the Microsoft Purview compliance portal?
Suggested Answer: D
Get Premium SC-200 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
41 comments · newest first
BO
Boris
11 months ago
Management log? Nah, that's not where the action is.
EN
Ena
11 months ago
Surprised that the Details tab is the go-to!
TA
Tasia
11 months ago
I thought the Events tab would be more useful, though.
WI
Wilson
12 months ago
Totally agree, the Details tab has all the info!
TE
Terry
12 months ago
You need to check the Details tab for impacted entities.
CA
Catina
1 year ago
The Management log seems less likely to help with identifying impacted entities. I think it’s more for tracking actions taken.
TA
Tawny
1 year ago
I recall something about the Sensitive Info Types tab, but I can't remember if it directly shows impacted entities.
BR
Brandon
1 year ago
I'm not entirely sure, but I feel like the Events tab might have relevant info too. We practiced a question about that, right?
KE
Kerry
1 year ago
I think we need to check the Details tab of the alert. I remember it showing specific information about the incidents.
LA
Latosha
1 year ago
I feel pretty confident about this one. Based on the information provided, the Details tab of the alert is where I would expect to find the details on the impacted entities. That seems like the most straightforward way to address this question.
AL
Alise
1 year ago
I'm a bit confused on this one. Is the Management log the right place to look for the impacted entities, or should I be focusing on the Sensitive Info Types tab? I want to make sure I get this right on the exam.
GR
Gracia
1 year ago
Okay, let me think this through. We have a Microsoft 365 Defender subscription with DLP policies that have aggregated alerts. To identify the impacted entities, I believe we should check the Details tab of the alert. That seems like the most logical place to find that information.
SH
Sheldon
1 year ago
Hmm, I'm not entirely sure about this one. I know we need to identify the impacted entities, but I'm not sure if the Details tab is the right place to look. Maybe the Events tab would have more information?
DO
Doyle
1 year ago
This looks like a straightforward question about identifying impacted entities in a DLP alert. I think the Details tab of the alert would be the best place to review that information.
HE
Herman
1 year ago
I'm confident that the right approach here is to report the suspicious account activity and recommend filing a Suspicious Activity Report. Better to err on the side of caution when it comes to potential money laundering.
CO
Corazon
1 year ago
Hmm, this looks like a tricky one. I'll need to carefully read through the code and understand the logic before attempting to solve it.
KE
Keshia
1 year ago
I remember something about keepalive settings, but I'm not sure how the timing works with the three missed messages.
PH
Phil
1 year ago
It's a good thing the exam doesn't ask about the 'Sensitive Info Leaks' tab, or I'd be in trouble!
VE
Vernice
1 year ago
C) the Sensitive Info Types tab of the alert
ER
Erick
1 year ago
B) Management log
DE
Delsie
1 year ago
A) the Details tab of the alert
JE
Jeffrey
2 years ago
If I can't find the impacted entities in the Details tab, I'll try the Events tab. Maybe there's some clue there. But I'm feeling pretty confident about A.
LU
Lura
1 year ago
I agree, the Details tab is usually where you can find the necessary information to identify the impacted entities.
NO
Noel
1 year ago
If you can't find the impacted entities there, you should check the Events tab for more information.
GE
Gearldine
1 year ago
Yeah, the Sensitive Info Types tab might also provide some useful insights.
PA
Paris
1 year ago
I always start by reviewing the Details tab of the alert.
EL
Elvera
1 year ago
I agree, the Details tab is usually where you can find the information you need.
FR
Frank
1 year ago
If you can't find the impacted entities there, try checking the Events tab.
TO
Tora
1 year ago
I think you should review the Details tab of the alert first.
JO
Josphine
2 years ago
I'm gonna go with option A. The Details tab is where the important information is usually found, right? No need to overcomplicate things.
JE
Jesusita
2 years ago
Hmm, the Sensitive Info Types tab might also be relevant since DLP policies are involved. But I'll start with the Details tab just to be safe.
GL
Glenn
1 year ago
After checking the Details tab, we can then move on to the Sensitive Info Types tab to see if any sensitive information was involved.
CH
Chantell
1 year ago
I agree, starting with the Details tab is a good idea to get an overview of the alert.
MA
Matthew
2 years ago
I think we should also check the Sensitive Info Types tab of the alert to see if any sensitive data is involved.
CH
Charisse
2 years ago
The Details tab of the alert seems like the right place to look for the impacted entities. That's where I'd expect to find the information I need.
BE
Belen
1 year ago
I agree, the Details tab is where you can find the information about the impacted entities.
AR
Arminda
1 year ago
D) the Events tab of the alert
CR
Crissy
2 years ago
C) the Sensitive Info Types tab of the alert
SH
Shizue
2 years ago
A) the Details tab of the alert
RA
Raylene
2 years ago
I agree with Coral. The Details tab usually provides specific information about the alert.
CO
Coral
2 years ago
I think we should review the Details tab of the alert.