You are the IT administrator of an organization with a Microsoft 365 subscription and Microsoft 365 E5 licenses assigned to your users. You wish to create a Microsoft 365 Alert Policy rule so that you will be notified when someone in your organization creates an inbox rule for their mailbox that forwards or redirects messages to another email account. 
You create the new alert policy and give it a describing name. Now you must choose a category. 

Which two of these are valid options for the Category field?

Answer options:

A.GDPR
B.Permissions
C.Data Security
D.Threat management
E.Custom Domain

Correct Answers: B and D 
To help with tracking and managing the alerts generated by a policy, you can assign one of the following categories to a policy. Data loss prevention
Information governance
Mail flow
Permissions
Threat management
Others
See exhibit: 

Option A, C and E are not valid Alert Policy categories. 
Reference: 
To know more about alert policies, please refer to the link below: 

https://docs.microsoft.com/en-us/microsoft-365/compliance/alert-policies?view=o365-worldwide