SC-400 Encryption & Key Management 2

Question 1

Advanced Message Encryption in Microsoft 365 is built on top of which foundational feature?

Accepted Answer

Office 365 Message Encryption (OME)

Answer

Advanced Message Encryption is a superset of Office 365 Message Encryption (OME), adding capabilities like email revocation and expiration on top of the base OME functionality.

Question 2

Which Microsoft 365 plan is required to use Advanced Message Encryption?

Accepted Answer

Microsoft 365 E5 or Office 365 E5

Answer

Advanced Message Encryption requires Microsoft 365 E5 or Office 365 E5 (or the equivalent add-on), whereas basic OME is included in E3 plans.

Question 3

An administrator wants to allow external recipients to view an encrypted email without signing in with a Microsoft account. Which OME portal authentication option supports this?

Accepted Answer

One-time passcode (OTP)

Answer

The one-time passcode (OTP) option sends a temporary code to the recipient's email, allowing them to authenticate to the OME portal without needing a Microsoft or Google account.

Question 4

What is the key difference between S/MIME encryption and Office 365 Message Encryption (OME)?

Accepted Answer

S/MIME encrypts messages end-to-end using certificates; OME wraps messages in a portal experience

Answer

S/MIME relies on certificate exchange for true end-to-end encryption, while OME encrypts messages and delivers them through a secure web portal, making it usable without recipient certificates.

Question 5

Which PowerShell cmdlet is used to create a new Office 365 Message Encryption (OME) configuration that customizes the branding of the encrypted email portal?

Accepted Answer

New-OMEConfiguration

Answer

New-OMEConfiguration creates a custom OME configuration object where you can set branding elements like logo, portal text, and background color for the encrypted message portal.

(SC-400) Microsoft Certified Information Protection and Compliance Administrator Associate Practice Test

(SC-400) Microsoft Certified Information Protection and Compliance Administrator Associate Practice Test

SC-400 Encryption & Key Management 2