You have a Microsoft 365 E5 subscription and a hybrid Microsoft Exchange Server organization.
Each member of a group named Executive has an on-premises mailbox. Only the Executive group members have multi-factor authentication (MFA) enabled. Each member of a group named Research has a mailbox in Exchange Online.
You need to use Microsoft Office 365 Attack simulator to model a spear-phishing attack that targets the Research group members.
What should you do first?

A. From the Microsoft Defender for Identity portal, configure the primary workspace settings.

B. From the Microsoft Azure portal, configure the user risk policy settings in Azure AD Identity Protection.

C. Enable MFA for the Research group members.

D. Migrate the Executive group members to Exchange Online.








 

Suggested Answer: C

Reference:
https://docs.microsoft.com/en-us/office365/securitycompliance/attack-simulator

This question is in MS-500 Microsoft 365 Security Administration Exam
For getting Microsoft Certified: Security, Compliance, and Identity Fundamentals Certificate



Disclaimers:
The website is not related to, affiliated with, endorsed or authorized by Microsoft. 
The website does not contain actual questions and answers from Microsoft's Certification Exams.
Trademarks, certification & product names are used for reference only and belong to Microsoft.