Microsoft 365 Security Administration Exam: Configuring Email Notifications for Exchange Online Administrative Permissions

Configuring Email Notifications for Exchange Online Administrative Permissions

Prev Question Next Question

Question

You are the IT administrator of an organization with a Microsoft 365 subscription.

You need to be notified by email whenever someone is assigned administrative permissions in your Exchange Online organization.

How would you configure this from the Security & Compliance admin center?

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B. C. D.

Correct Answer: D

You need to create an alert policy for Elevation of Exchange admin privilege.

When enabled the policy generates an alert when someone is assigned administrative permissions in your Exchange Online organization.

For example, when a user is added to the Organization Management role group in Exchange Online.

Use alert policies to track user and admin activities, malware threats, or data loss incidents in your organization. After choos More advanced alerting capabilities are available through ES, Threat intelligence or Advanced compliance subscriptions. Alerts Dashboard View alerts Name Alert policies Manage advanced alerts MIP AutoLabel simulation completed Permissions Suspicious email sending pattems detected Email messages removed after delivery Classification Email messages from a campaign removed after delivery Data loss prevention Successful exact data match upload Records management Elevation of Exchange admin privilege Information governance Email messages containing malicious URL removed after delivery Supervision OoOoodoo oo a User restricted from sharing forms and collecting responses
The following table lists the eDiscovery-related RBAC roles in the Microsoft 365 compliance center, ant groups that each role is assigned to by default. Role eDiscovery Manager & Organization Reviewer Administrator Management Case y v v Management ‘Communication v ‘Compliance y v v Search Custodian v Export v Hold y v v

Since the answer is given in the documentation, the other options are incorrect.

To know more about alert policies, please refer to the link below:

The correct answer is D. From Alerts, create an alert policy.

To configure email notifications for admin permission assignments in Exchange Online, follow the steps below:

  1. Log in to the Microsoft 365 Security & Compliance Center (https://protection.office.com).

  2. Click on "Alerts" in the navigation menu on the left-hand side.

  3. Click on the "+ New alert policy" button.

  4. Enter a name for the alert policy.

  5. Under the "Conditions" section, select "Office 365" as the service, and "Exchange Admin" as the category.

  6. Under "Activities," select "Admin Role Assigned" and any other activities you want to be notified about.

  7. Under "Trigger," select "Based on user" and choose the user or group for which you want to be notified.

  8. Under "Alert frequency," select "Send notifications for each result" to receive an email notification each time an admin permission is assigned.

  9. Under "Actions," select "Send me an email notification" and enter the email address where you want to receive the notification.

  10. Click on "Create alert policy" to save the policy.

Once the alert policy is created, you will receive email notifications whenever an administrative permission is assigned in your Exchange Online organization.

Prev Question Next Question