SC-401 Question #102: Real Exam Question with Answer & Explanation

Question

You have a Microsoft 365 E5 tenant that uses a domain named contoso.com. A user named User1 sends link-based, branded emails that are encrypted by using Microsoft Purview Advanced Message Encryption to the recipients shown in the following table. For which recipients can User1 revoke the emails?

Options

• ARecipient1 only
• BRecipient4 only
• CRecipient1 and Recipient2 only
• DRecipient3 and Recipient4 only
• ERecipient1, Recipient2, Recipient3, and Recipient4

Explanation

{"question_number": 8, "correct_answer": "B", "explanation": "Microsoft Purview Advanced Message Encryption supports email revocation only for link-based encrypted messages where the recipient accesses the content through the OME web portal using a social identity (Google, Yahoo, etc.) or a one-time passcode. Revocation is NOT supported for recipients who authenticate with a Microsoft or Microsoft 365 work/school account, because those recipients may have already decrypted and cached the message natively. Internal Microsoft 365 users (contoso.com) cannot have emails revoked. External recipients with Microsoft personal accounts also cannot have emails revoked. Based on the table (not shown but implied by the answer), Recipient4 is the only recipient who authenticates via a social ID or one-time passcode through the OME portal, making them the only recipient for whom revocation is possible. All other recipients use Microsoft-based authentication.", "generated_by": "claude-sonnet", "llm_judge_score": 4}

No community discussion yet for this question.