Exam 70-345 topic 1 question 39 discussion

Actual exam question from Microsoft's 70-345

Question #: 39
Topic #: 1

Your company has an Exchange Server 2016 organization and a Microsoft Office 365 subscription configured in a hybrid deployment.
You configure the synchronization of on-premises Active Directory accounts to Office 365.
All users connect to email services by using Outlook 2016.
You plan to deploy Office 365 Message Encryption for the mailboxes of two executives named Exec1 and Exec2. The mailboxes are hosted in Office 365.
You need to recommend which actions must be performed to ensure that all of the email messages sent from Exec1 and Exec2 to any recipient on the Internet are encrypted.
Which two actions should you recommend? Each correct answer presents part of the solution.

A. Deploy Microsoft Azure Rights Management (Azure RMS) to the Office 365 subscription.
B. Deploy Active Directory Rights Management Services (AD RMS) to the network.
C. Run the Set-MsolUserLicense cmdlet.
D. From the Office 365 Exchange admin center, create a rule.
E. Install a certificate on the computer of Exec1 and the computer of Exec2.
F. From the on-premises Exchange admin center, create a transport rule. AF

Show Suggested Answer

Suggested Answer: Explanation 🗳️
A: Office 365 Message Encryption requires the Azure Rights Management service. Once you have a subscription to this service, you can activate it.
Note: Encryption options for Office 365:
✑ Azure RMS, including both IRM capabilities and OME
✑ S/MIME
✑ TLS
✑ Encryption of data at rest (through BitLocker)
F: As an administrator, you can create transport rules to enable Microsoft Office 365 Message Encryption. This lets you encrypt any outgoing email messages and remove encryption from encrypted messages coming from inside your organization or from replies to encrypted messages sent from your organization.
To use the transport rule to encrypt messages, your organization must have Windows Azure Rights Management set up for Office 365 Message Encryption.
References:
https://docs.microsoft.com/en-us/rights-management/deploy-use/activate-service https://technet.microsoft.com/en-us/library/dn569289.aspx

by l1f3rl at March 9, 2020, 6:11 p.m.

Comments

Submit Cancel

resmail

Highly Voted 4 years, 9 months ago

A+D Die Office 365-Nachrichtenverschlüsselung ist Teil von Microsoft Azure Rights Management. Sowohl Information Rights Management als auch die Office 365-Nachrichtenverschlüsselung sind richtlinienbasiert und wurden für die Nutzung des Exchange-Transportregelmoduls entwickelt. Der folgende Technet-Artikel enthält weitere Informationen zum Thema: https://technet.microsoft.com/de-de/library/dn569289.aspx

upvoted 6 times

...

Harry83

Most Recent 4 years, 4 months ago

A+D https://docs.microsoft.com/en-us/microsoft-365/compliance/set-up-new-message-encryption-capabilities?view=o365-worldwide

upvoted 3 times

...

RakRocky

4 years, 4 months ago

A. Deploy Microsoft Azure Rights Management (Azure RMS) to the Office 365 subscription. F. From the on-premises Exchange admin center, create a transport rule.

upvoted 1 times

...

cristobalhdez

5 years, 1 month ago

If the mailboxes are hosted in office 365, why we need to create the rule on-premise?

upvoted 4 times

...

MCSA11

5 years, 1 month ago

A. Deploy Microsoft Azure Rights Management (Azure RMS) to the Office 365 subscription. F. From the on-premises Exchange admin center, create a transport rule. AF

upvoted 1 times

...

l1f3rl

5 years, 1 month ago

Correct.

upvoted 1 times

...

Exam 70-345 All Questions

View all questions & answers for the 70-345 exam

Exam 70-345 topic 1 question 39 discussion

Comments

resmail

Harry83

RakRocky

cristobalhdez

MCSA11

l1f3rl

SY0-701