Exam MS-201 topic 2 question 17 discussion

Here are some considerations for Dynamic Delivery and forwarded messages: • If the forwarded recipient is protected by a Safe Attachments policy that uses the Dynamic Delivery option, then the recipient sees the placeholder, with the ability to preview compatible files. • If the forwarded recipient is not protected by a Safe Attachments policy, the message and attachments will be delivered without any Safe Attachments scanning or attachment placeholders.

There are scenarios where Dynamic Delivery is unable to replace attachments in messages. These scenarios include: • Messages in public folders. • Messages that are routed out of and then back into a user's mailbox using custom rules. • Messages that are moved (automatically or manually) out of cloud mailboxes to other locations, including archive folders. • Deleted messages. • The user's mailbox search folder is in an error state. • Exchange Online organizations where Exclaimer is enabled. To resolve this, see KB4014438. • S/MIME encrypted messages. • You configured the Dynamic Delivery action in a Safe Attachments policy, but the recipient doesn't support Dynamic Delivery (for example, the recipient is a mailbox in an on-premises Exchange organization). However, Safe Links in Microsoft Defender for Office 365 is able to scan Office file attachments that contain URLs (depending on how the global settings for Safe Links are configured).

NYN. Summary of article: NYN Safe Attachments protection for email messages is controlled by Safe Attachments policies. There is no default Safe Attachments policy, so to get the protection of Safe Attachments, you need to create one or more Safe Attachments policies. Redirect attachment on detection: Enable redirect and Send the attachment to the following email address: For Block, Monitor, or Replace actions, send messages that contain malware attachments to the specified internal or external email address for analysis and investigation. Priority: If you create multiple policies, you can specify the order that they're applied. No two policies can have the same priority, and policy processing stops after the first policy is applied. Prevents messages with detected malware attachments from being delivered. Messages are quarantined where only admins (not end-users) can review, release, or delete the messages.

First statement should be false. You can use *some* of the features ATP offers with on-prem Exchange, dynamic delivery is not one of them however. Ref: https://techcommunity.microsoft.com/t5/exchange/is-office-365-atp-dynamic-delivery-option-working-with-on/m-p/61109

First statement is false because Dynamic Delivery is not supported for on-premises mailboxes.