Exam SC-401 topic 1 question 13 discussion

https://learn.microsoft.com/en-us/purview/ome-advanced-expiration

It‘s a custom OME Template https://learn.microsoft.com/en-us/purview/ome-advanced-expiration

The mail flow rule is the first and most direct step to automatically enforce the encryption and expiration requirements for emails sent to external recipients. The rule would be configured to apply an Office 365 Message Encryption (OME) template that has the 7-day expiration policy built-in.

B should be the right answer. The only way to revoke a message is through mailflow rule. Also let you expire a message.

Sensitivity Label. Custom branding is for user experience in AIP and encryption emails (logo, colors)

The answer is correct

To ensure that encrypted email messages sent to an external recipient can be revoked or will expire within seven days, you should configure: C. a sensitivity label Sensitivity labels in Microsoft 365 allow you to classify and protect your organization's data. By configuring a sensitivity label with specific settings for encryption, you can set expiration policies and revocation options for emails sent to external recipients. This is the most appropriate choice for managing the encryption and expiration of emails. Additional Context: Custom Branding Template (A): This is used for branding purposes and does not affect email encryption or expiration. Mail Flow Rule (B): While mail flow rules can control the flow of emails, they do not provide the specific functionality for revocation or expiration of encrypted messages. Conditional Access Policy (D): This is used to manage access to resources based on conditions but does not directly relate to email encryption or expiration.