You are a global admin in a company with a Microsoft 365 E5 subscription.
You notice that some users have set up email forwarding out of your organization.
In response to this you have enabled the “Creation of forwarding/redirect rule” policy and configured yourself as the recipient of the alerts.
However, you find that the number of informational emails received due to the policy feels a bit like spamming and wish to enforce a daily notification limit to 10 emails.
What should you configure?
Click on the arrows to vote for the correct answer
A. B. C. D.Correct Answer: A
You should edit the built-in policy and change the daily notification limit to 10:
Option B is incorrect.
This will only suppress an existing alert.
Option C is incorrect.
This will only dismiss an existing alert.
Option D is incorrect.
There is no need to create a new policy, you should edit the existing built-in policy.
To know more about setting up alert policies, please refer to the link below:
The correct answer is D. In Microsoft 365 Compliance center - Policies - Alerts Policies, create a new policy.
Explanation:
Email forwarding outside of the organization can pose a security risk, as sensitive information can be unintentionally leaked. To prevent this, the admin has enabled the “Creation of forwarding/redirect rule” policy, which sends alerts to the admin whenever a user sets up an email forwarding rule outside of the organization.
However, as the number of informational emails received is high, the admin wishes to enforce a daily notification limit to 10 emails. To achieve this, the admin needs to create a new policy that specifies the notification limit.
The steps to create a new policy are as follows:
Once the policy is saved, the admin will receive a notification alert for every 10 email forwarding rules created outside of the organization.
Option A is incorrect as editing the built-in policy is not recommended as it can affect other policies that rely on the same settings.
Option B and C are also incorrect as they relate to suppressing or dismissing alerts, which is not the solution to the problem described in the question.