Question
You work as a Systems Administrator for your company. The company has recently purchased a subscription to Microsoft 365. All users in your company have a Microsoft 365 E5 license.
You have deployed Microsoft Teams to all users in the company. Several teams and channels have been configured.
External contractors can access Microsoft Teams using guest accounts.
You need to configure the environment to ensure that no files containing malware can be opened from Microsoft Teams channels by either company users or external contractors.
Which of the following should you configure?
- A. Sensitivity labels
- B. Microsoft Defender for Office 365 (formerly Advanced Threat Protection) Correct
- C. Protected Identity Management
- D. Conditional Access policy
Explanation
Safe Attachments for SharePoint, OneDrive, and Microsoft Teams, part of Microsoft Defender for Office 365 (formerly Advanced Threat Protection, included in Microsoft 365 E5), detects malicious files in team sites and libraries and locks them so that people, including guests, can't open, copy, move or share them. Sensitivity labels classify and protect content but don't scan for malware, and Conditional Access controls sign-in conditions, not file content. Protected Identity Management is not a Microsoft 365 feature.
