SC-401 Question #11: Real Exam Question with Answer & Explanation

Question

You have a Microsoft 365 E5 subscription. You need to ensure that encrypted email messages sent to an external recipient can be revoked or will expire within seven days. What should you configure first?

Options

• Aa custom branding template
• Ba mail flow rule
• Ca sensitivity label
• Da Conditional Access policy

Explanation

{"question_number": 6, "question_summary": "What must you configure first to allow encrypted emails sent externally to be revoked or expire within 7 days?", "correct_answer": "C. A sensitivity label", "explanation": "Email revocation and expiration are features of Microsoft Purview Advanced Message Encryption. For these features to work, the email must be encrypted using a sensitivity label that applies Azure Rights Management (AzureRMS) encryption - specifically, the label must be configured with user-defined or admin-defined permissions. The sensitivity label is the prerequisite because it enables the encryption mechanism that supports revocation and expiration. Only after creating the sensitivity label can you set expiration dates (through label settings or mail flow rules). A custom branding template (A) controls appearance, not expiration. A mail flow rule (B) applies encryption but cannot apply the AIP-based encryption required for revocation. A Conditional Access policy (D) controls authentication, not message encryption features.", "generated_by": "claude-sonnet", "llm_judge_score": 4}

No community discussion yet for this question.