Question
Your organization has a Microsoft 365 subscription.
You need to review the impact of a recent phishing incident that targeted email users.
What should you use?
- A. the Microsoft Defender portal Correct
- B. the Microsoft 365 admin center
- C. the Microsoft Entra admin center
- D. the Microsoft Exchange admin center
Explanation
The Microsoft Defender portal is where you investigate email threats. Its Explorer Phish view shows messages identified as phishing, along with delivery locations, URL clicks and the most targeted users, which reveals the impact of an attack. The Microsoft 365 admin center handles general tenant administration, the Microsoft Entra admin center handles identity, and the Exchange admin center handles mail configuration, so none of them is the tool for assessing a phishing incident.
