You are an IT administrator and wish to implement Advanced Threat Protection Safe attachments policies for two critical user groups, Sales and Marketing. The requirements are: All mail should be scanned for malware. For Marketing you want to implement a policy that delivers messages with attachments and then tracks what happens with detected malware. For Sales you want to implement a policy that delivers messages immediately but replaces attachments with placeholders until Safe Attachments scanning is complete. What should you implement?

Answer options:

A.You select "Block" for both policies.
B.For Marketing you select Replace, for Sales you select Monitor.
C.For Marketing you select Monitor, for Sales you select Dynamic Delivery.
D.For Marketing you select Monitor, for Sales you select Replace.

Correct Answer: C 
Monitor: Delivers messages with attachments and then tracks what happens with detected malware. Delivery of safe messages might be delayed due to Safe Attachments scanning. This would fit the requirement for Marketing. 
Dynamics Delivery: Avoids message delays while protecting recipients from malicious files. Enables recipients to preview attachments in safe mode while scanning is taking place. This would fit the requirement for Sales.
Option A is incorrect. This would stop mail with suspecting attachments from arriving. 
Option B is incorrect. This would remove suspecting attachments for Marketing, and for Sales delivery will not be immediate.
Option D is incorrect. Monitor meets the requirements for Marketing but Replace is the incorrect choice for Sales.
Reference: 
To know more about Safe attachments, please refer to the link below: 

https://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/safe-attachments?view=o365-worldwide