SC-100 Practice Question 4008
Exam: SC-100
Domain: Design security solutions for applications and data
Difficulty: medium
You need to design a solution that encrypts sensitive documents in SharePoint Online so that only members of the Finance team can decrypt them, even if the files are downloaded or emailed externally. What should you architect?
Answer Options
A
Purview sensitivity labels with Rights Management encryption restricted to Finance
B
Local NTFS file permissions on user hard drives
C
Windows BitLocker volume encryption
D
A password-protected zip file wrapper
Correct Answer
A: Purview sensitivity labels with Rights Management encryption restricted to Finance
Explanation
Microsoft Purview Information Protection sensitivity labels configured with Azure Rights Management encryption restrict file access rights specifically to the Finance security group.