How Long Is Attack Simulation Training Available After the Simulation?
You use Microsoft Defender for Office 365. You plan to automate an attack simulation campaign. Any users that fail the simulation must take additional training based on the simulation results. What is the maximum number of days the training will be available to the users after the simulation?
Community Votes
100% of anonymous learners picked answer C. Votes are pick records left by other test-takers — they are not the verified answer.
Community Insight
The question tests the maximum training availability window in attack simulation training, and the trap is mixing it up with the smaller day values used elsewhere in the simulation scheduler, such as due-date counts.
In Microsoft Defender for Office 365 attack simulation training, remedial training assigned to users who fail a simulation remains available for a maximum of 30 days after the simulation ends. This page confirms why 30 days (option C) is the correct answer and not the shorter 7- or 15-day figures often confused with due-date settings.
The most common wrong pick is 15 days, because learners remember a 15-day figure from other simulation configuration fields (such as due-date or reporting options) and apply it to the training availability window instead of the actual 30-day maximum.
Community Discussion (3 comments)
Comments & Corrections
No comments yet — spotted an error or have a note? Share it below.
Expert Analysis
Why the Answer Is Correct
Attack simulation training in Microsoft Defender for Office 365 lets an administrator chain a simulation to remediation training, so payload reporters and simulation failures are pushed into a training assignment automatically. When that training is attached to a campaign, the platform exposes it to the affected users for a bounded period after the simulation finishes, and the maximum value for that availability period is 30 days (option C). The four options (7, 15, 30, 45) are all plausible-looking Microsoft day counts, which is exactly why the wording "maximum" matters — 30 is the ceiling, not the midpoint. Microsoft's own simulation documentation, which is the page the community repeatedly links in the discussion, is the authority for this limit.Why the Other Options Are Wrong
Option A (7 days) is too short: a seven-day window is a plausible due-date or reminder interval but not the maximum training availability. Option B (15 days) is the classic distractor, because 15 days shows up in several other simulation settings, so recalling "15" from the wrong field is easy. Option D (45 days) exceeds the platform's ceiling and would make the question meaningless — if 45 were allowed, 30 would not be the maximum. Only 30 days satisfies both the wording "maximum" and the actual configuration boundary in the Defender portal.Community Comment Notes
The vote record here is unanimous for C with 100% agreement, and two separate commenters — joaquim.gomes.pt and GetEsn — independently attach the same Microsoft Learn page, "attack-simulation-training-simulations", as their justification, which is strong corroboration that the answer is documented rather than guessed. As Newb007 bluntly put it, "what a dumb question. why does this matter?", a reminder that this is pure recall of a portal limit rather than a design skill. The practical reading of the community thread is simple: if you can cite the simulations documentation line for the training window, you answer C without hesitation.Exam Takeaway
Memorise 30 days as the maximum training availability after a simulation, and treat 7, 15 and 45 as distractors borrowed from adjacent settings.Official Reference
Exam Strategy
When MS-102 asks for a "maximum" or "minimum" numeric limit in Defender for Office 365, eliminate the smallest and largest plausible values first, then decide between the two middle figures using the specific feature name. Here, the phrase "additional training" points at the training availability window rather than the simulation due date, which is where 30 days lives.
Frequently Asked Questions
Why is 15 days wrong for attack simulation training availability?
Fifteen days belongs to other simulation fields such as due-date or reminder counts, not to the maximum training availability window, which is 30 days after the simulation ends.
What happens if a user ignores the assigned training within the 30 days?
The training assignment simply expires for that user, so the simulation's failure record stands alone and no further training content is served from that campaign.
Related Analysis
Practice All MS-102 Questions
Access 111 questions with complete answers and detailed explanations.
View Full MS-102 Practice Test →