Exam MS-101 topic 3 question 19 discussion

Correct Answer is A. Update as on 25th Mar 2021 - At this time, the decryption capability when exporting search results doesn't include encrypted content from SharePoint and OneDrive for Business sites. However, support is coming soon for documents encrypted with Microsoft encryption technologies and stored in SharePoint Online and OneDrive for Business. https://docs.microsoft.com/en-us/microsoft-365/compliance/export-search-results?view=o365-worldwide

A https://docs.microsoft.com/en-us/microsoft-365/compliance/export-search-results?view=o365-worldwide Currently, this decryption capability doesn't include encrypted content from SharePoint and OneDrive for Business sites. Only RMS-encrypted email messages will be decrypted when you export them.

The answer is B now. To make it easier to manage encrypted content in the eDiscovery workflow, Microsoft Purview eDiscovery tools now incorporate the decryption of encrypted files attached to email messages and sent in Exchange Online. Additionally, encrypted documents stored in SharePoint Online and OneDrive for Business are decrypted in eDiscovery (Premium). Source: https://learn.microsoft.com/en-us/microsoft-365/compliance/ediscovery-decryption?view=o365-worldwide

With a Microsoft 365 E5 subscription, when you export the eDiscovery search results that include Azure Rights Management (Azure RMS) encrypted content, the following content can be decrypted: Microsoft Exchange emails: The encrypted Exchange emails can be decrypted and exported as part of the eDiscovery search results. Microsoft OneDrive documents: The encrypted OneDrive documents protected with Azure RMS can be decrypted and exported. Microsoft SharePoint documents: The encrypted SharePoint documents protected with Azure RMS can also be decrypted and exported.

UPDATE: https://learn.microsoft.com/en-us/microsoft-365/compliance/ediscovery-decryption?view=o365-worldwide To make it easier to manage encrypted content in the eDiscovery workflow, Microsoft Purview eDiscovery tools now incorporate the decryption of encrypted files attached to email messages and sent in Exchange Online.1 Additionally, encrypted documents stored in SharePoint Online and OneDrive for Business are decrypted in eDiscovery (Premium)2. Answer is B now.

Credits to GJPetrites for the following (incl. the link). The situation has changed, documents from SharePoint and OneDrive are also decrypted during an eDiscovery (Premium) workflow: "Encrypted documents stored in SharePoint Online and OneDrive for Business are decrypted in eDiscovery (Premium)2. Prior to this new capability, only the content of an email message protected by rights management (and not attached files) were decrypted. Encrypted documents in SharePoint and OneDrive couldn't be decrypted during the eDiscovery workflow. Now, files that are encrypted with a Microsoft encryption technology is located on a SharePoint or OneDrive account are searchable and decrypted when the search results are prepared for preview, added to a review set in eDiscovery (Premium), and exported." https://learn.microsoft.com/en-us/microsoft-365/compliance/ediscovery-decryption?view=o365-worldwide

Lot of this responses are 1.5/2 years old!, Are we to assume the question is referring to eDiscovery 'Standard' and NOT eDiscovery Premium? With Premium SPO and OndDriver files can be decrypted. This will help determine the correct answer 'A' or 'B' As per MS article last updated (28/3/2023) https://learn.microsoft.com/en-us/microsoft-365/compliance/ediscovery-decryption?view=o365-worldwide

Answer A because: "At this time, the decryption capability when exporting search results doesn't include encrypted content from SharePoint and OneDrive for Business sites. However, support is coming soon for documents encrypted with Microsoft encryption technologies and stored in SharePoint Online and OneDrive for Business." from https://learn.microsoft.com/en-us/microsoft-365/compliance/export-search-results?view=o365-worldwide#decrypting-rms-protected-email-messages-and-encrypted-file-attachments

Looks like all content is now decrypted. https://docs.microsoft.com/en-us/microsoft-365/compliance/export-search-results?view=o365-worldwide#decrypting-rms-protected-email-messages-and-encrypted-file-attachments

I think correct is B. E5 include Advanced eDiscovery and can handle also Sharepoint and OneDrive https://petri.com/microsoft-365-advanced-ediscovery-decrypt

At this time, the decryption capability when exporting search results doesn't include encrypted content from SharePoint and OneDrive for Business sites. However, support is coming soon for documents encrypted with Microsoft encryption technologies and stored in SharePoint Online and OneDrive for Business.

Only RMS-encrypted email messages will be decrypted when you export them.