You are a global administrator in a company with a Microsoft 365 subscription with Microsoft Defender for Office 365 Plan 1 license assigned to your users. You want to protect your users from unintentionally opening malicious websites by clicking on harmful URLs. 
What should you configure?

Answer options:

A.Safe attachments policy
B.Anti-phishing policy
C.Anti-spam policy
D.Safe links policy

Correct Answer: D 
You should configure a Safe Links policy. By enabling this feature Office 365 will protect your users by scanning the URL in inbound email messages and in other locations within Office 365. 
Safe Links are enabled in the Microsoft 365 Defender portal, under Policies & Rules -> Threat Policies -> Policies -> Safe Links.
Option A is incorrect. This policy protects against malware in attachments.
Option B is incorrect. This policy protects against phishing attempts.
Option C is incorrect. This policy protects against inbound and outbound spam in your organization.
Reference: 
To know more about configuring Safe Links policies, please refer to the link below: 

https://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/set-up-safe-links-policies?view=o365-worldwide