Exam SC-401 topic 2 question 30 discussion

Actual exam question from Microsoft's SC-401

Question #: 30
Topic #: 2

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You recently discovered that the developers at your company emailed Azure Storage Account keys in plain text to third parties.
You need to ensure that when Azure Storage Account keys are emailed, the emails are encrypted.
Solution: You configure a mail flow rule that matches a sensitive info type.
Does this meet the goal?

A. Yes
B. No

Show Suggested Answer

Suggested Answer: A 🗳️

by Jarem at June 10, 2025, 6:53 p.m.

Comments

Submit Cancel

58d4802

1 month, 3 weeks ago

Selected Answer: A

Microsoft Purview includes built-in sensitive info types, including one for Azure Storage Account keys. You can create a mail flow rule (also known as a transport rule) in Exchange that: Detects this sensitive info type in the message body or attachments Automatically applies encryption (e.g., Microsoft Purview Message Encryption)

upvoted 3 times

zied01

2 weeks, 4 days ago

hello i can't see the setting relative to the SIT in the mail transport rule assistant in Exchange admin center

upvoted 1 times

...

shaunshauncybersecchecke

1 month, 3 weeks ago

Selected Answer: A

The mail flow rule should automatically apply nessacry encryption

upvoted 1 times

...

Mushroomski

1 month, 3 weeks ago

Selected Answer: A

The mail flow rule that matches the Azure Storage Account Key sensitive info type and applies encryption (like OME) does meet the goal — assuming it's configured with the correct conditions and actions.

upvoted 1 times

...

Jarem

1 month, 3 weeks ago

Selected Answer: A

Yes, this solution meets the goal. By configuring a mail flow rule that matches a sensitive info type, you can ensure that emails containing Azure Storage Account keys are encrypted. This rule can detect when sensitive information is being sent and apply encryption to protect the data.

upvoted 1 times

...