exam questions

Exam SC-400 All Questions

View all questions & answers for the SC-400 exam

Exam SC-400 topic 1 question 14 discussion

Actual exam question from Microsoft's SC-400
Question #: 14
Topic #: 1
[All SC-400 Questions]

HOTSPOT -
You are implementing Microsoft Office 365 Message Encryption (OME) for a Microsoft 365 tenant named contoso.com.
You need to meet the following requirements:
✑ All email to a domain named fabrikam.com must be encrypted automatically.
✑ Encrypted emails must expire seven days after they are sent.
What should you configure for each requirement? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

Show Suggested Answer Hide Answer
Suggested Answer:
Reference:
https://docs.microsoft.com/en-us/microsoft-365/compliance/email-encryption?view=o365-worldwide https://docs.microsoft.com/en-us/microsoft-365/compliance/ome-advanced-expiration?view=o365-worldwide

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Bharat
Highly Voted 3 years, 11 months ago
Correct answers are "A Mail Flow Rule" and "Custom Branding Template" respectively.
upvoted 57 times
Rockalm
2 years, 5 months ago
With a connector you can request to always use TLS, but not the OME encryption. So, "mail flow rule" is the right answer.
upvoted 4 times
...
ccKane
2 years, 9 months ago
"A Mail Flow Rule": see - https://docs.microsoft.com/en-us/microsoft-365/compliance/define-mail-flow-rules-to-encrypt-email?view=o365-worldwide --- /// --- "Custom Branding Template": see - https://docs.microsoft.com/en-us/microsoft-365/compliance/ome-advanced-expiration?view=o365-worldwide
upvoted 4 times
...
...
JakubK64
Highly Voted 3 years, 11 months ago
Base on this docs article - https://docs.microsoft.com/en-us/microsoft-365/compliance/ome?view=o365-worldwide I think it will be mail flow rule (not connector) and templates for "Do not forward"
upvoted 6 times
JakubK64
3 years, 11 months ago
I mean "Expire in 7 days", not "Do not forward"
upvoted 2 times
...
...
Nivos300
Most Recent 4 months, 2 weeks ago
A Mail Flow Rule in the Exchange admin center And A Custom Branding Template https://learn.microsoft.com/en-us/purview/define-mail-flow-rules-to-encrypt-email https://learn.microsoft.com/en-us/purview/ome-advanced-expiration
upvoted 1 times
...
Boeroe
8 months, 1 week ago
DLP would be the correct answer at this time, as all mail rules are to be migrated to Purview DLP as the message in EO mentions: "DLP policies and DLP-related conditions and actions in Mail flow rules are no longer supported and can no longer be created or edited in the Exchange Admin Center (EAC) or using Exchange Online PowerShell. We recommend migrating all DLP-related rules to Microsoft Purview DLP in the compliance center as soon as possible. Once you have migrated these rules please delete them here in the EAC or via PowerShell"
upvoted 3 times
ca7859c
1 month, 1 week ago
Yes!!!
upvoted 1 times
...
...
ShrawanBhat1991
1 year, 2 months ago
Correct answers are "A Mail Flow Rule" and "Custom Branding Template"
upvoted 1 times
...
Domza
1 year, 5 months ago
New info: ~You can force recipients to use the encrypted message portal to view and reply to encrypted emails sent from your organization by using a custom branded template that specifies an expiration date in Microsoft PowerShell.
upvoted 1 times
...
dmoorthy
2 years, 1 month ago
Correct answers are "A Mail Flow Rule" and "Custom Branding Template"
upvoted 1 times
...
xswe
2 years, 2 months ago
You can easily configure this if you just visit Exchange Admin Center and go to "Mail flow" then "Rules", configured a rule that encrypt all messages that goes to the given domain. If you want the encrypted emails to get expired in x amnount of days you use a custom branding template in MS Exchange through powershell, the following command will achieve this "New-OMEConfiguration -Identity "Expire in x days" -ExternalMailExpiryInDays X"
upvoted 2 times
...
fimbulvetrk
2 years, 6 months ago
you don't have to use a mail flow connector in this case, once you can simply create a mail flow rule specifying the recipient domain and then apply the encryption, so I'd go for "mail flow rule" and "custom brand template"
upvoted 1 times
...
Bluebaron520
2 years, 6 months ago
valid 24/11/2022
upvoted 1 times
...
wooyourdaddy
2 years, 12 months ago
I wrote the exam today, this question was on it, I choose the answers provided, scored 890!
upvoted 3 times
...
junior6995
3 years ago
New-OMEConfiguration -Identity "Expire in 7 days" -ExternalMailExpiryInDays 7
upvoted 2 times
...
ChaBum
3 years, 5 months ago
Connector as email encryption is for a specific domain (partner) https://docs.microsoft.com/en-us/exchange/mail-flow-best-practices/use-connectors-to-configure-mail-flow/set-up-connectors-for-secure-mail-flow-with-a-partner
upvoted 3 times
Whatsamattr81
2 years, 11 months ago
I don’t think a send connector is useful in this scenario… it’s gotta be a simple transport rule.
upvoted 1 times
...
...
Discuss4certi
3 years, 9 months ago
Correct. for the mailflow rule go to the exchange admin center to enable it. and for the powershell follow the example in this piece of documentation: https://docs.microsoft.com/en-us/microsoft-365/compliance/ome-advanced-expiration
upvoted 3 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...