Exam SC-400 topic 1 question 23 discussion

No, no, no. If you choose to encrypt, you still need to specify who can view/read the documents, that includes your own organization.

I think Answer is No, no, no and for the first one, if you want all your users to view an email that has the sensitivity label applied, you should assign permissions for all users and groups in your organization (M365x925027.onmicrosoft.com).

"any authenticated users" includes any user who: Has an email account that's authenticated by Microsoft Entra ID or a federated social provider. Is authenticated by a Microsoft account. Uses a one-time passcode for email only.

Only users within your organization can open a confidential document or email is No because you would see tenantname.onmicrosoft.com in the assign permissions section

This question's correct answer is N, N, N! Only users at your company can view.... - No: Reason: "Requirements and limitations for "Add any authenticated users" This setting doesn't restrict who can access the content that the label encrypts, while still encrypting the content and providing you with options to restrict how the content can be used (permissions), and accessed (expiry and offline access). However, the application opening the encrypted content must be able to support the authentication being used. Other 2 sentences are also NO based on the policy deifications you can read. Tricky part of this question is granting authenticated users with Viewer.. Please read this pharagraph https://learn.microsoft.com/en-us/purview/encryption-sensitivity-labels#requirements-and-limitations-for-add-any-authenticated-users

As BTAB sadi below, Yes, NO NO, there is 3 selection for granted for that policy. Authenticated users is an option so, all users in domain can see document and others NO based on the descriptions.. Be careful while readin and scanning informaiton on the question ::)

Did anyone read the provided link? LOL

IT WAS ON EXAM OCTOBER 18 2023

was on Exam August 9, 2023

Correct Answer No, No, Yes Co Author permission includes print

I went into Purview and experimented with this.. When you assign permissions for encryption within a sensitivity label, you can assign permissions to "any authenticated users" separately from "all users in your organization". There's a tool-tip next to "any authenticated users". Here is what it says: --- Includes any user who: * Has an e-mail account that's authenticated by Azure AD or a federated social provider * Is authenticated by a Microsoft Account * Uses a one-time passcode for e-mail only The tool-tip has a link to "learn more" which points to: https://learn.microsoft.com/en-us/microsoft-365/compliance/encryption-sensitivity-labels?view=o365-worldwide So... with "authenticated users" permissions to view, the content is encrypted, but not restricted to viewing by only members of the org.

No, No, No, for users to be able to view an encrypted email they MUST have explicit permission to do so. Also, for the 3rd answer Reviewer does NOT allow printing (see: https://learn.microsoft.com/en-us/azure/information-protection/configure-usage-rights#rights-included-in-permissions-levels)

Tricky, but at a push I am leaning towards N/N/N on the basis that it is not specified that all users can access. The settings of the label specify that authenticated users have been assigned viewing permissions however this does not mean that it is restricted to users internally. If it was specified to all users within the domain only then this should be specified within the "add users or groups" setting. So therefore, the answer for me is NNN.

On exam 1/20/2022

I lean toward Y. N, N...yes only the users within the org that have been assigned permission will have access AND of course "A" could be more specific in that regard but is "A" true???Lean toward yes. Only users inside the org CAN view an email with the sensitivity label applied. Users outside the org can't And users inside the org CAN w/ the appropriate permissions. It's very close but Y/N/N for me. It really is an MS semantics question

Answer is correct. Yes No No Notice it says the setting doesn't restrict who can access the content when it comes to authenticated users. https://docs.microsoft.com/en-us/microsoft-365/compliance/encryption-sensitivity-labels?view=o365-worldwide#requirements-and-limitations-for-add-any-authenticated-users Requirements and limitations for "Add any authenticated users" This setting doesn't restrict who can access the content that the label encrypts, while still encrypting the content and providing you with options to restrict how the content can be used (permissions), and accessed (expiry and offline access).

I think No/No/No. Authenticated users means any users from social provider or OTP can view, not users in orgnization