Prevent User2 from Accessing Email | SC-400 Exam: Microsoft Information Protection Administrator

Prevent User2 from Accessing Email

Question

Your company has a Microsoft 365 tenant that uses a domain named contoso.com.

The company uses Microsoft Office 365 Message Encryption (OME) to encrypt email sent to users in fabrikam.com.

A user named User1 erroneously sends an email to user2@fabrikam.com.

You need to prevent user2@fabrikam.com from accessing the email.

What should you do?

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B. C. D. E.

A.

The correct answer to this question is B. Run the Set-OMEMessageRevocation cmdlet.

Explanation:

Microsoft Office 365 Message Encryption (OME) is a feature in Microsoft 365 that allows users to send and receive encrypted email messages. In this scenario, User1 has erroneously sent an email to user2@fabrikam.com, and you need to prevent user2 from accessing the email.

To achieve this, you can use the Set-OMEMessageRevocation cmdlet, which revokes access to an encrypted message that has already been sent. This cmdlet works by sending a revocation message to the recipient's email address, which prevents them from accessing the original message.

To use the Set-OMEMessageRevocation cmdlet, you need to have the appropriate permissions in your Microsoft 365 tenant. The cmdlet can be run from the Exchange Online PowerShell module or the Security & Compliance Center PowerShell module.

The correct syntax for the Set-OMEMessageRevocation cmdlet is as follows:

sql
Set-OMEMessageRevocation -Identity <MessageId> -Revoke

In this syntax, <MessageId> is the identifier of the message that you want to revoke, and -Revoke is the parameter that specifies that the message should be revoked.

In summary, to prevent user2@fabrikam.com from accessing the email that was erroneously sent by User1, you should run the Set-OMEMessageRevocation cmdlet, which sends a revocation message to user2 and prevents them from accessing the original message.