You have a Microsoft 365 E5 subscription that contains the devices shown in the following table.
 
You need to configure an incident email notification rule that will be triggered when an alert occurs only on a Windows 10 device. The solution must minimize administrative effort.
What should you do first?

A. From the Microsoft 365 admin center, create a mail-enabled security group.

B. From the Microsoft 365 Defender portal, create a device group.

C. From the Microsoft Endpoint Manager admin center, create a device category.

D. From the Azure Active Directory admin center, create a dynamic device group.








 

Suggested Answer: B

Reference:
https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/machine-groups?view=o365-worldwide
 https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/configure-email-notifications?view=o365-worldwide

This question is in MS-101 Exam
For getting Microsoft 365 Administrator Expert Certificate


Disclaimers:
The website is not related to, affiliated with, endorsed or authorized by Microsoft. 
The website does not contain actual questions and answers from Microsoft's Certification Exams.
Trademarks, certification & product names are used for reference only and belong to Microsoft.