- (Topic 1)
Your company has a Microsoft 365 tenant that uses a domain named contoso.
The company uses Microsoft Office 365 Message Encryption (OMI ) to encrypt email sent to users in fabrikam.com.
A user named User1 erroneously sends an email to user2@fabrikam You need to disable user2@fabrikam.com from accessing the email. What should you do?

1. A. Run the New-ComplianceSearchAction cmdlet.
2. B. Instruct User1 to delete the email from her Sent Items folder from Microsoft Outlook.
3. C. Run the Get-MessageTrace Cmdlet.
4. D. Run the Set-OMEMessageRevocation Cmdlet.
5. E. instruct User1 to select Remove external access from Microsoft Outlook on the web.

Correct Answer: C

- (Topic 1)
You have a Microsoft 365 tenant that uses Microsoft Office 365 Message Encryption (OME).
You need to ensure that any emails containing attachments and sent to user1@contoso.com are encrypted automatically by using OME.
What should you do?

1. A. From the Exchange admin center, create a new sharing policy.
2. B. From the Microsoft 365 security center, create a Safe Attachments policy.
3. C. From the Exchange admin center, create a mail flow rule.
4. D. From the Microsoft 365 compliance center, configure an auto-apply retention label policy.

Correct Answer: C
You can create mail flow rules to help protect email messages you send and receive. You can set up rules to encrypt any outgoing email messages and remove encryption from encrypted messages coming from inside your organization or from replies to encrypted messages sent from your organization.
Reference:
https://docs.microsoft.com/en-us/microsoft-365/compliance/define-mail-flow-rules-to-encrypt-email?view=o365-worldwide

- (Topic 1)
You create a label that encrypts email data.
Users report that they cannot use the label in Outlook on the web to protect the email messages they send.
You need to ensure that the users can use the new label to protect their email. What should you do?

1. A. Wait six hours and ask the users to try again.
2. B. Create a label policy.
3. C. Create a new sensitive information type.
4. D. Modify the priority order of label policies

Correct Answer: D

- (Topic 1)
You need to test Microsoft Office 365 Message Encryption (OME) capabilities for your company. The test must verify the following information:
The acquired default template names
The encryption and decryption verification status Which PowerShell cmdlet should you run?

1. A. Test-ClientAccessRule
2. B. Test-Mailflow
3. C. Test-OAuthConnectivity
4. D. Test-IRMConfiguration

Correct Answer: D
Reference:
https://docs.microsoft.com/en-us/microsoft-365/compliance/set-up-new-message- encryption-capabilities?
view=o365-worldwide

- (Topic 2)
You are evaluating the technical requirements for the DLP reports. Which user can currently view the DLP reports?

1. A. Admin4
2. B. Admin1
3. C. Admin5
4. D. Admin2
5. E. Admin3

Correct Answer: E