Question
You have a new Microsoft 365 E5 tenant.
You need to enable an alert policy that will be triggered when an elevation of Microsoft Exchange Online administrative privileges is detected.
What should you do first?
- A. Enable auditing. Correct
- B. Enable Microsoft 365 usage analytics.
- C. Create an Insider risk management policy.
- D. Create a communication compliance policy.
Explanation
Enabling auditing is necessary to record events such as changes in administrative privileges. This step allows for the creation and triggering of alert policies when specific activities, like elevation of Exchange Online administrative privileges, are detected.
