Question
You have a Microsoft 365 E5 subscription.
You need to ensure that encrypted email messages sent to an external recipient can be revoked or will expire within seven days.
What should you configure first?
- A. a custom branding template Correct
- B. a mail flow rule
- C. a sensitivity label
- D. a Conditional Access policy
Explanation
With Microsoft Purview Advanced Message Encryption, expiration and revocation work for external recipients who read mail in the OME portal, and you force that portal experience with a custom branding template, for example New-OMEConfiguration -ExternalMailExpiryInDays 7. Expiration can only be used with custom branding, so the template comes first. A mail flow rule is the second step, used to apply the template to matching messages. A sensitivity label and a Conditional Access policy do not configure OME portal expiration.
