Exam MS-101 topic 3 question 44 discussion

Answers are correct. When a document or email is protected by a Rights Management service, it is encrypted at rest and in transit. It can then be decrypted only by authorized users

Answers are correct: Open 30 Days after copying to Internet Connected Computer Guest cannot open. Permissions have been granted for all users in the M36x901434.onmicrosoft.com domain as Co-Owner. There's no permissions assigned for external users.

Answer is not correct. It is very correct, most straightforward question I've seen from microsoft in a while jesus bejeus i hate them

Agree with Jake1

Answer is Correct: https://docs.microsoft.com/en-us/previous-versions/azure/information-protection/configure-policy-protection To specify the users you want to be able to open protected documents and emails, select Add permissions. Then on the Add permissions pane, select the first set of users and groups who will have rights to use the content that will be protected by the selected label: Choose Select from the list where you can then add all users from your organization by selecting Add <organization name> - All members. This setting excludes guest accounts. Or, you can select Add any authenticated users, or browse the directory. Some typical scenarios for the any authenticated users setting: You don't mind who views the content, but you want to restrict how it is used. For example, you do not want the content to be edited, copied, or printed. You don't need to restrict who accesses the content, but you want to be able to track who opens it and potentially, revoke it. You have a requirement that the content must be encrypted at rest and in transit, but it doesn't require access controls.

Answers are correct, only users in the same org can work with the file. https://kartikkopalleblog.files.wordpress.com/2019/07/31-1.png?w=625 https://kartikkopalle.com/2019/12/02/document-protection-with-azure-information-protection-ad-hoc-permissions/

Why should the user outside of the organization be able to decrypt/open the doc? Permission is only assigned for the tenants URL. Agree with Jake, I think the answers are correct.

30d each If you protect an email with an Office document attachment to a user who doesn't have an account in Azure AD, the authentication method changes. The Azure Rights Management service is federated with some popular social identity providers, such as Gmail. If the user's email provider is supported, the user can sign in to that service and their email provider is responsible for authenticating them. If the user's email provider is not supported, or as a preference, the user can apply for a one-time passcode that authenticates them and displays the email with the protected document in a web browser.

Both are 30 days. Why would an external user 'can open document'? he/she can open the document for up to 30 days also. Answer is 30D and 30D