Azure Information Protection Encryption

B

Azure Information Protection can encrypt documents and emails.

Azure Information Protection is a cloud-based solution that helps an organization to classify and optionally, protect its documents and emails by applying labels.

Labels can be applied automatically by administrators who define rules and conditions, manually by users, or a combination where users are given recommendations.

The protection technology uses Azure Rights Management (often abbreviated to Azure RMS). This technology is integrated with other Microsoft cloud services and applications, such as Office 365 and Azure Active Directory.

This protection technology uses encryption, identity, and authorization policies. Similarly to the labels that are applied, protection that is applied by using Rights

Management stays with the documents and emails, independently of the location " inside or outside your organization, networks, file servers, and applications.

https://docs.microsoft.com/en-us/azure/information-protection/what-is-information-protection https://docs.microsoft.com/en-us/azure/information-protection/quickstart-label-dnf-protectedemail

Azure Information Protection (AIP) is a cloud-based solution that helps organizations to classify, label, and protect sensitive information. It provides an additional layer of security for sensitive data by encrypting it and controlling access to it.

The correct answer to this question is B. AIP can encrypt documents and email messages. This means that AIP can protect sensitive data within these files by encrypting the contents so that only authorized users can access it. AIP uses encryption keys that are managed by Azure Key Vault, which provides secure storage and management of cryptographic keys.

Option A is incorrect as AIP is not designed to encrypt network traffic. Instead, Azure Virtual Network Encryption can be used to encrypt network traffic between virtual machines and subnets in Azure.

Option C is also incorrect as AIP does not encrypt an Azure Storage account. Instead, Azure Storage Service Encryption (SSE) can be used to encrypt data at rest in Azure Storage.

Option D is also incorrect as AIP does not encrypt an Azure SQL database. Instead, Azure SQL Database Transparent Data Encryption (TDE) can be used to encrypt data at rest in Azure SQL Database.

In summary, Azure Information Protection (AIP) can encrypt documents and email messages to provide an additional layer of security for sensitive data.