What should you do?

You have a Micorsoft 365 subcription that uses Windows Defender Advacend Threat protection (Windows Defender ATP).

All the devices in your organization are onboarded to Windows Defendor ATP.

You need to ensure that an alert is generated if malicious activity was detected on a device during the last 24 hours.

What should you do?
A . From Advanced hunting, create a query and a detection rule
B . From the Security & Compliance admin center, create a data loss prevention (DLP) policy.
C . From the Security & Compliance admin center, create an audit log search.
D . From Alert queue, create a suppression rule and assign an alert.

View Answer

Answer: D