This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
Where do you go in Microsoft Purview Insider Risk Management to view all alerts generated by policies?
Cases dashboard
Activity explorer
Alerts dashboard
How does the scatter plot in the User activity tab help investigators?
It maps user behavior to Microsoft Entra ID roles.
It visualizes risk-scored events over time to identify sequences and patterns.
It provides direct access to Copilot summaries for each activity.
What is a recommended next step if an alert involves multiple serious activities across different services?
Dismiss the alert to avoid duplication.
Create a case to manage follow-up actions and collaboration.
Delete the alert to reduce dashboard clutter.
What role do cases play in insider risk investigations?
They track licensing for each alert.
They allow grouping and managing alert investigations for a specific user.
They store Power Automate logs for compliance tracking.
Which role is required to use Advanced hunting for insider risk events?
Microsoft 365 Compliance Administrator
Insider Risk Management Analyst or Investigator
Security Operator
You must answer all questions before checking your work.
Was this page helpful?