Question

Your organization uses Microsoft Purview Message Encryption. A compliance investigator needs to be able to inspect the contents of encrypted email attachments that leave the organization so that DLP and eDiscovery searches can index them. Which capability should you enable to allow the service to remove encryption from mail flowing through Exchange Online for inspection?

Accepted Answer

Enable the Encryption removal transport rule action (decryption of Microsoft 365 Message Encryption on outbound mail)

Answer

Configure an Advanced Message Encryption expiration policy on the branded template

Answer

Apply the Encrypt-Only protection template to all outbound messages

Answer

Enable Double Key Encryption for the affected mailboxes