G Professional Collaboration Engineer Practice Exam

What action should be taken to configure alerting related to phishing attacks?

1. Set up a Token audit log event alert.

2. Set up an Admin audit log event alert.

3. Set up an email settings changed alert.

4. Set up a suspicious login event alert.

The correct answer is: Set up a suspicious login event alert.

To configure alerting related to phishing attacks, setting up a suspicious login event alert is particularly effective because phishing attacks often involve unauthorized attempts to access accounts. By monitoring for suspicious login activities, such as multiple failed login attempts, logins from unusual locations, or logins at odd hours, organizations can quickly identify potential breaches or attempts to exploit accounts. This proactive measure allows security teams to react promptly to unusual patterns that may indicate phishing attempts, enabling better protection against unauthorized access. While other alert options, such as token audit logs or admin audit logs, may contribute to overall security, they do not directly target the immediate signs of phishing attacks, making a suspicious login event alert the most relevant choice in this context.