Microsoft SC-401 Exam - Topic 3 Question 16 Discussion

Actual exam question for Microsoft's SC-401 exam

Question #: 16
Topic #: 3

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You recently discovered that the developers at your company emailed Azure Storage Account keys in plain text to third parties.

You need to ensure that when Azure Storage Account keys are emailed, the emails are encrypted.

Solution: You configure a mail flow rule that matches the text patterns.

Does this meet the goal?

AYes

BNo

Show Suggested Answer

Suggested Answer: B

To ensure Azure Storage Account keys are encrypted when sent via email, you need a Data Loss Prevention (DLP) policy that detects Azure Storage Account keys using a sensitive information type and automatically encrypts emails containing these keys.

Text patterns in mail flow rules are not as reliable as sensitive information types in DLP.

Mail flow rules lack advanced content detection and machine learning-based classification, making them less effective than DLP.

by Aracelis at Nov 24, 2025, 10:47 AM

Limited Time Offer

25%

Off

Get Premium SC-401 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Justine

17 days ago

I don't think just matching text patterns is enough.

upvoted 0 times

...

Dorethea

23 days ago

That sounds like a solid solution!

upvoted 0 times

...

Eulah

28 days ago

Configuring a mail flow rule is a good first step, but it's not a complete solution. They should also consider using Azure Key Vault to securely store and manage the storage account keys.

upvoted 0 times

...

Ming

1 month ago

Haha, emailing sensitive keys in plain text? That's a security disaster waiting to happen! This solution is better than nothing, but they really need to rethink their entire email security process.

upvoted 0 times

...

Jaime

1 month ago

No, this is not a good solution. Configuring a mail flow rule is not enough to ensure the emails are encrypted. You need to use a more secure method like Azure Information Protection.

upvoted 0 times

...

Chery

1 month ago

Yes, this solution should work. Encrypting the emails with the storage account keys is a good way to prevent unauthorized access.

upvoted 0 times

...

Quiana

2 months ago

I think I read somewhere that just matching text patterns isn't enough for encryption. So, I would lean towards "No."

upvoted 0 times

...

Kelvin

2 months ago

I feel like configuring a mail flow rule is a step in the right direction, but it doesn't guarantee encryption.

upvoted 0 times

...

Laura

2 months ago

This seems similar to a practice question we did on data loss prevention. I think the answer might be "No."

upvoted 0 times

...

Tawanna

2 months ago

This seems straightforward enough. Encrypting the emails is the key requirement, and a mail flow rule is a reasonable way to do that. I'll outline the steps I'd take to set that up.

upvoted 0 times

...

Vi

2 months ago

I'm a bit confused about the "unique solution" part of the question. Does that mean there's only one correct answer, or could there be multiple valid approaches? I'll need to read through it again carefully.

upvoted 0 times

...

Roslyn

2 months ago

Okay, I think I've got a handle on this. Configuring a mail flow rule to match the text patterns should do the trick. Let me jot down a few notes on how I'd implement that.

upvoted 0 times

...

Lashunda

3 months ago

I think the answer is A. It makes sense to use mail flow rules.

upvoted 0 times

...

Sunshine

3 months ago

I remember studying mail flow rules, but I'm not sure if they can actually encrypt emails.

upvoted 0 times

...

Blossom

3 months ago

Yes, definitely meets the goal!

upvoted 0 times

...

Leatha

4 months ago

Encrypting the emails seems like a good solution, but I'm not sure if a mail flow rule is the right way to do it. I'll need to double-check the requirements.

upvoted 0 times

...

Paris

4 months ago

Hmm, this looks like a tricky one. I'll need to think carefully about the best approach here.

upvoted 0 times

Ricarda

3 months ago

But what if the patterns aren't comprehensive enough?

upvoted 0 times

...

Alonzo

3 months ago

I think option A is the way to go.

upvoted 0 times

...