Exam SC-400 topic 1 question 36 discussion

Looks correct~ Found it here: Steps 6-8 https://learn.microsoft.com/en-us/purview/add-your-organization-brand-to-encrypted-messages#create-an-exchange-mail-flow-rule-that-applies-your-custom-branding-to-encrypted-emails-sent-from-your-online-organization-to-external-recipients with love-

I do not understand why the first option is the sender. If you wish to protect the message with OME, the mailflow rule should apply to the recpient. Not one wish to apply OME to internal mailboxes.

Correct. Both the options are correct. If you've already defined a mail flow rule to apply encryption, skip this step. Otherwise, to configure the mail flow rule to apply encryption, from Do the following, select Modify the message security, and then select Apply Office 365 Message Encryption and rights protection. Select a Rights Management Service (RMS) template from the list and then select add action. From Do the following, select Modify the message security > Apply custom branding to OME messages. Next, from the drop-down, select a branding template.

Just making you all aware, this question IS complete. It was on my exam today (20/12/2023) and was this exact question.

this question is nog complete, and a lot of settings are moved to OME is replaced by Microsoft Purview Message Encryption. May 2023. https://go.microsoft.com/fwlink/?linkid=2213908

"You need to create a Microsoft Exchange Online mail flow rule to apply OME1 to email." --> every mail will get OME1? Makes no sense

[Apply this rule if | The sender is located inside the organization | Modify the message security] https://learn.microsoft.com/en-us/microsoft-365/compliance/add-your-organization-brand-to-encrypted-messages?view=o365-worldwide#create-an-exchange-mail-flow-rule-that-applies-your-custom-branding-to-encrypted-emails-sent-from-your-online-organization-to-external-recipients

I guess something is missing in this question...

I agree with the given answer. If sender is internal apply security would catch all sent messages from all internal users.