You have a Microsoft 365 tenant that contains two users named User1 and User2.
You create the alert policy shown in the following exhibit.
User2 runs a script that modifies a file in a Microsoft SharePoint library once every four minutes and runs for a period of two hours.
How many alerts will User1 receive?
When multiple events that match the conditions of an alert policy occur within a short period of time, they are added to an existing alert due to alert aggregation. The policy is set to trigger an alert after five activities within a one-hour window. Since User2 runs a script that modifies a file every four minutes over two hours, there will be a total of 30 modifications. The first five modifications trigger the first alert, and subsequent modifications within each hour will be aggregated into a single alert. Therefore, an alert will be generated in the first hour and another in the second hour, totaling two alerts.
I would say: A "When multiple events that match the conditions of an alert policy occur with a short period of time, they are added to an existing alert by a process called alert aggregation. When an event triggers an alert, the alert is generated and displayed on the Alerts page and a notification is sent. If the same event occurs within the aggregation interval, then Microsoft 365 adds details about the new event to the existing alert instead of triggering a new alert. The goal of alert aggregation is to help reduce alert "fatigue" and let you focus and take action on fewer alerts for the same event." https://learn.microsoft.com/en-us/purview/alert-policies?view=o365-worldwide#alert-aggregation
so the aggregated threshold is 5, so shouldnt the answer be 5 as well?
no, threshold 5 windows 1 hour, it means 5 attemps during 1 hour will generate 1 alert. Therefore, 2 alerts.
But we have try every 4 minutes during 1 hour, so we have 3 alerts during 1 hour
With the alert aggregation process: The first 5 modifications will trigger the first alert. The next 10 modifications within that same hour will be aggregated to the existing alert, so no new alerts will be generated within the first hour. In the second hour, the script again modifies the file 15 times. This means another alert will be generated after the first 5 modifications. The remaining 10 will again be aggregated to the same alert due to the 1-hour window. Given this aggregation behavior, User1 will receive: 1 alert (from the first hour) + 1 alert (from the second hour) = 2 alerts in total. So, you are correct. The answer is: A. 2
exactly, it will create an alert per hour, that's all. 2 alerts -> A
Window: 1 hour. So as I read it, there will be a notification once per hour
2 is correct answer https://www.examtopics.com/discussions/microsoft/view/94370-exam-ms-101-topic-3-question-150-discussion/
D Good 25
Answer is C Alert Notifications for Policy Settings Given the scenario where User2 runs a script that modifies a file in a Microsoft SharePoint library every four minutes and runs for two hours, with the alert policy set to trigger an alert after five activities within one hour: The script runs for a total of 120 minutes (2 hours). Modifications occur every 4 minutes, resulting in 30 modifications. The policy triggers an alert for every 5 modifications. Therefore, in 2 hours, the total number of alerts User1 will receive is: C. 10 alerts
The aggregate interval could be 1 minute or 15 min depending on the Microsoft365 subscription. https://learn.microsoft.com/en-us/purview/alert-policies?view=o365-worldwide#alert-aggregation In that case, you will have the first alert at minutes 20, 40, 60, 80, and 120. The total number of alerts will be 5. My selection will be 5 following the Microsoft article related the aggregate intervale which in this case the max is 15 min but each threshold is reached ever 20 min. each even will generate a single alert.
Sorry for my wrong answer, the window interval is 1 hour, which means that 1 alert will be triggered per hour is threshold 5 is reached in this hour. The correct answer is the A.
I'm Sorry for My Wrong Answer, but it is A
Anyone got the right answer please ?
picture is wrong In any case key here is "aggregation" https://learn.microsoft.com/en-us/purview/alert-policies?view=o365-worldwide
So right answer is A. 2 ?