Describe security, compliance, privacy, and trust in Microsoft 365 →mediumMultiple ChoiceObjective-mapped
MS-900 Practice Question: Describe security, compliance, privacy, and trust in Microsoft 365
A legal firm needs to send a confidential document to a client via email. The firm requires that the client cannot forward or print the email and that the email expires after seven days. Which Microsoft Purview solution should they use?
⚠ Common exam trap
Watch out — candidates often confuse sensitivity labels with Message Encryption, not realizing that while labels can apply encryption, they do not natively support per-message expiration or granular usage restrictions like 'do not forward' and 'do not print' without additional configuration via Azure RMS templates, which is exactly what Message Encryption provides out-of-the-box.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Microsoft Purview Message Encryption
Microsoft Purview Message Encryption (A) is the correct solution because it allows the legal firm to apply usage restrictions such as preventing forwarding and printing, and to set an expiration period of seven days on the email. This is achieved through Azure Rights Management (Azure RMS) templates that enforce these controls directly on the encrypted message, ensuring the client cannot bypass the restrictions.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Microsoft Purview Message Encryption
Why this is correct
Microsoft Purview Message Encryption is the correct choice because it uses Azure Rights Management (Azure RMS) to encrypt email messages and apply persistent usage restrictions on the client's copy, even after they are sent. It can prevent forwarding, disable printing, and set an expiration date that revokes access to the message after a specified time. This works seamlessly with external recipients regardless of their email provider, making it ideal for a legal firm sending confidential documents to a client.
- ✗
Data Loss Prevention (DLP) policies
Why it's wrong here
Data Loss Prevention (DLP) policies are incorrect for this scenario because they focus on detecting and blocking the unauthorized transmission of sensitive information before it leaves the organization. DLP does not apply persistent usage restrictions like no-forwarding or expiration to a message that is successfully sent to an external recipient. While DLP can prevent the send altogether, it cannot retroactively control how the received document is handled.
- ✗
Sensitivity labels
Why it's wrong here
Sensitivity labels are incorrect because, although they can classify and optionally encrypt emails and documents, they depend on the client's email client and authentication to enforce rights. For a straightforward, outbound confidential document to a client, Microsoft Purview Message Encryption is the recommended and more reliable method for applying email-specific restrictions and expiration. Labels are better suited for ongoing classification and protection across the entire document lifecycle, not for a single ad-hoc email receipt.
- ✗
eDiscovery (Premium)
Why it's wrong here
eDiscovery (Premium) is incorrect because it is a compliance solution for searching, preserving, and reviewing content in legal investigations, not for applying outgoing message protections. It allows an organization to find and hold emails and documents for litigation or compliance, but it cannot impose restrictions like no-forwarding or expiration on a confidential document being sent to a client. This is a fundamental difference between eDiscovery and Message Encryption.
Go deeper
Related to this question
About these practice questions
This MS-900 question is part of Courseiva's 217-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MS-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MS-900 exam.