A Workspace ONE administrator is configuring email for an organization that uses Microsoft Exchange Online (Office 365). The organization has an extreme security posture and wants to require all…

Question

Options

• AWorkspace ONE Content with DLP enabled.
• BPowerShell integration with default blacklist.
• CSEGv2 with content transforms.
• DWorkspace ONE Web with DLP enabled.

• A
  6% (1)
• B
  24% (4)
• C
  59% (10)
• D
  12% (2)

Explanation

SEGv2 (Secure Email Gateway version 2) is the correct choice because it acts as a proxy between Exchange Online and mobile devices, allowing administrators to apply content transforms - including encryption of email attachments - before they reach the end user. It is the only component in the list that can intercept and manipulate the actual email content/attachments in transit.

Why the distractors are wrong:

• A (Workspace ONE Content + DLP): Content is a secure file-sharing/storage app; DLP here controls data exfiltration, not email attachment encryption at the Exchange layer.
• B (PowerShell + default blacklist): PowerShell integration manages device compliance and access control (blocking non-compliant devices from Exchange), not content transformation or encryption.
• D (Workspace ONE Web + DLP): Web is a secure browser, entirely unrelated to email attachment handling in Exchange Online.

Memory tip: Think of SEG as a mail room guard - every email passes through it, so it's the only component that can open, inspect, and re-seal (transform/encrypt) attachments before delivery. If the question involves modifying email content, the answer is SEGv2.

No community discussion yet for this question.