Home » Microsoft » MS-500 v.2 » You have to review messages that have been quarantined by your organization’s O365 ATP security.
You have to review messages that have been quarantined by your organization’s O365 ATP security.
Where would you go to do this?
A. Protection.office.com, threat management, review, quarantine
B. Securitycenter.windows.com, incidents, filter detection sources to Office ATP
C. Portal.cloudappsecurity.com, investigate, files, filter app to Microsoft Exchange Online
D. Use the Preview-QuarantineMessage PowerShell cmdlet
Correct Answer: A
Explanation/Reference:
You should use the O365 Security & Compliance Center to review quarantined messages.
You could also use Get-QuarintineMessage PowerShell cmdlet; or if you know the ID of the quarantined message you want to view you can use Preview-QuarantineMessage, but the latter doesn’t work for O365 ATP as per the documentation below.
Reference:
https://docs.microsoft.com/en-za/microsoft-365/security/office-365-security/manage-quarantined-messages-and-files#view-your-organizations-quarantined-messages
