StudyByteLearn
← SC-100: Microsoft Cybersecurity Architect
SC-100 · Microsoft 365 Intune Purview and Copilot

Practice question 388 of 498 · hard

A project site receives a confidentiality label. Administrators assume that all documents downloaded from it are now encrypted. What should the architect verify first?

Choose the single best answer.

  1. A.Whether audit activity alone proves the file was encrypted
  2. B.Whether a retention label alone prevents downloaded plaintext access
  3. C.Whether container-level sharing restrictions alone satisfy downloaded-file encryption
  4. D.Whether file-level labeling and encryption are actually configured for the required content
Show the answer and explanation

✓ Correct answer

  • Whether file-level labeling and encryption are actually configured for the required content

Container labels and file protection have different scopes, so actual file-level labeling and encryption must be tested. Container sharing restrictions do not automatically encrypt downloaded files, retention addresses lifecycle, and an activity record alone is not proof of encryption.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Unofficial study material. Not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product capabilities and exam objectives can change; verify current Microsoft documentation. Practice scores do not predict or guarantee an exam result.