Question 8 of 9

You have a Microsoft 365 tenant with Microsoft 365 E5 licenses.

A user named John Gruber is configured to receive alerts from Azure AD Identity Protection as shown below.

Your tenant contains the following users.

The user sign-in log is shown below

Select Yes if the statement is true. If the statement is not true select No.

Box 1: No

John Gruber will receive two alerts.

Sign-ins from an infected device are classified as low. John Gruber will receive alerts on the unfamiliar location and anonymous IP address though.

Box 2: No

User2 will receive two alerts. Email alerts are sent to all global admins, security admins, and security readers

Sign-ins from the infected device are classified as low.

Box 3: No

User3 will not receive alerts. Email alerts are sent to all global admins, security admins, and security readers by default.

https://www.gitbit.org/course/ms-500/learn/Implementing-intelligent-security-using-risk-policies-in-Microsoft-365-NFQ6rYFeQ

https://docs.microsoft.com/en-us/azure/active-directory/identity-protection/overview-identity-protection

https://docs.microsoft.com/en-us/azure/active-directory/identity-protection/howto-identity-protection-configure-risk-policies