Advanced Threat Protection Safe Attachments Policies for Sales and Marketing | MS-500 Exam Answer

Implementing Advanced Threat Protection Safe Attachments Policies for Sales and Marketing

Question

You are an IT administrator and wish to implement Advanced Threat Protection Safe attachments policies for two critical user groups, Sales and Marketing.

The requirements are: All mail should be scanned for malware.

For Marketing you want to implement a policy that delivers messages with attachments and then tracks what happens with detected malware.

For Sales you want to implement a policy that delivers messages immediately but replaces attachments with placeholders until Safe Attachments scanning is complete.

What should you implement?

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B. C. D.

Correct Answer: C

Monitor: Delivers messages with attachments and then tracks what happens with detected malware.

Delivery of safe messages might be delayed due to Safe Attachments scanning.

This would fit the requirement for Marketing.

Dynamics Delivery: Avoids message delays while protecting recipients from malicious files.

Enables recipients to preview attachments in safe mode while scanning is taking place.

This would fit the requirement for Sales.

Option A is incorrect.

This would stop mail with suspecting attachments from arriving.

Option B is incorrect.

This would remove suspecting attachments for Marketing, and for Sales delivery will not be immediate.

Option D is incorrect.

Monitor meets the requirements for Marketing but Replace is the incorrect choice for Sales.

To know more about Safe attachments, please refer to the link below:

The correct answer is D. For Marketing, you select Monitor, and for Sales, you select Replace.

Advanced Threat Protection (ATP) Safe Attachments is a feature in Microsoft 365 that protects against unknown malware and viruses in email attachments by opening them in a sandbox environment for analysis before delivering them to the recipient.

To implement Safe Attachments policies for two critical user groups, Sales and Marketing, the following requirements must be met:

  1. All mail should be scanned for malware.
  2. For Marketing, messages with attachments should be delivered and then tracked for what happens with detected malware.
  3. For Sales, messages should be delivered immediately but replace attachments with placeholders until Safe Attachments scanning is complete.

To meet these requirements, two separate Safe Attachments policies should be created:

  1. For Marketing: Select "Monitor" for the Safe Attachments policy. This will allow messages with attachments to be delivered to recipients, and any detected malware will be tracked in the ATP Safe Attachments dashboard. This option satisfies the requirement to track what happens with detected malware.

  2. For Sales: Select "Replace" for the Safe Attachments policy. This option will replace attachments with placeholders until Safe Attachments scanning is complete, after which the original attachments will be delivered. This option satisfies the requirement to deliver messages immediately while waiting for Safe Attachments scanning to complete.

Therefore, the correct answer is D. For Marketing, select "Monitor," and for Sales, select "Replace."