What should you do first?

You have a Microsoft 365 E5 subscription and a hybrid Microsoft Exchange Server organization.

Each member of a group named Executive has an on-premises mailbox. Only the Executive group members have multi-factor authentication (MFA) enabled. Each member of a group named Research has a mailbox in Exchange Online.

You need to use Microsoft Office 365 Attack simulator to model a spear-phishing attack that targets the Research group members.

The email addresses that you intend to spoof belong to the Executive group members.

What should you do first?
A . From the Azure ATP admin center, configure the primary workspace settings
B . From the Microsoft Azure portal, configure the user risk policy settings in Azure AD Identity Protection
C . Enable MFA for the Research group members
D . Migrate the Executive group members to Exchange Online

Answer: C

Explanation:

Reference: https://docs.microsoft.com/en-us/office365/securitycompliance/attack-simulator