Microsoft 365 FundamentalsDescribe security, compliance, privacy, and trust in Microsoft 365Hard
A Microsoft 365 administrator wants to ensure that all sensitive data shared externally from SharePoint Online is encrypted, regardless of the recipient's email service. The encryption should be applied automatically based on the content being shared. Additionally, recipients should be able to access the encrypted content easily without needing to install specific client software. Which Microsoft Purview technology should be used?
- AeDiscovery
- BMessage Encryption (MPE)
- CData Loss Prevention (DLP)
- DInformation Barriers (IB)
Show answer & explanationAnswer & explanation
Correct answer: B. Message Encryption (MPE)
Microsoft Purview Message Encryption (MPE), built on Azure Information Protection, allows organizations to send encrypted emails to anyone, regardless of their email service. When integrated with DLP, it can automatically encrypt emails based on sensitive content, and recipients can access it via a web portal without special software.
Why the other options are wrong
- A. eDiscovery is used for searching and exporting content for legal or compliance investigations.
- C. Data Loss Prevention (DLP) can detect sensitive content and integrate with MPE to trigger encryption, but MPE is the technology that performs the encryption and secure delivery.
- D. Information Barriers (IB) prevent communication between internal user groups, not for encrypting external emails.
Microsoft Purview Message Encryption (MPE)
A service that allows organizations to send encrypted emails to anyone, inside or outside the organization, ensuring the confidentiality of sensitive information.
- Built on Azure Information Protection (AIP).
- Supports encryption for emails and attachments.
- Recipients can access encrypted messages via a web portal, even without a Microsoft 365 account.
- Can be integrated with DLP policies for automatic encryption based on sensitive content.
Memory trick: Messages encrypted, for all to view securely.