Skip to Content

MS-721: How to Configure Secure Microsoft Teams Meetings with End-to-End Encryption and Watermarks?

Discover the step-by-step solution for enforcing end-to-end encryption, watermarks, and lobby restrictions in Microsoft Teams meetings using the correct administrative tool.

Question

You have a Microsoft Teams deployment.

You need to ensure that meetings meet the following requirements:

  • End-to-end encryption must be enabled.
  • A watermark must be enabled for screenshare.
  • Only meeting organizers and co-organizers can bypass the lobby.
  • Meeting organizers must NOT be able to change the above configurations when scheduling a meeting.

What should you configure?

Select only one answer.

A. a meeting policy
B. a meeting template
C. a Teams template
D. an Audio Conferencing policy
E. the Meeting settings

Answer

To meet all specified requirements, configure B. a meeting template.

B. a meeting template

Explanation

Teams Premium includes the ability to create custom meeting templates. Meeting templates can be used to control meeting settings that a meeting organizer usually controls. With templates, you can create consistent meeting experiences for your company and help enforce compliance requirements and business rules.

Meeting templates can be used to enforce settings and set defaults. The template settings can be locked so that meeting organizer cannot change them, or they can be left unlocked for the meeting organizer to change if needed.

For highly sensitive meetings, you can restrict who can bypass the lobby, who can present meeting content if end-to-end encryption is enabled, when participants can chat, and restrict copying from the meeting chat.

End-to-End Encryption (E2EE) and Watermarks

  • Meeting templates allow admins to predefine and lock security settings like E2EE and watermarks for shared content. These settings are enforced at the meeting level, overriding organizer adjustments.
  • Templates ensure E2EE is enabled by default and watermarking is applied to screenshares, with both settings locked to prevent modification by organizers.

Lobby Bypass Restrictions

  • Templates can enforce the “Only organizers and co-organizers” lobby bypass rule. This setting is locked in the template, preventing organizers from changing it during scheduling.

Immutable Configurations

  • Meeting templates allow admins to set default values, visibility, and lock status for options. When locked, organizers cannot modify these settings during meeting creation, ensuring compliance.

Why Other Options Fail

  • A. Meeting Policy: Policies apply user-level defaults but do not lock settings. Organizers can override configurations like lobby bypass or E2EE.
  • C. Teams Template: Governs team structure (channels, apps) but not meeting-specific security settings.
  • D. Audio Conferencing Policy: Manages dial-in features, unrelated to encryption or watermarks.
  • E. Meeting Settings: Sets global defaults but lacks enforcement mechanisms. Organizers retain the ability to change configurations.

Implementation Steps

  1. In the Teams Admin Center, create a custom meeting template under Meetings > Meeting Templates.
  2. Configure the template to:
    • Enable and lock End-to-end encryption.
    • Enable and lock Watermark for shared content.
    • Set Who can bypass the lobby to Only organizers and co-organizers and lock the setting.
  3. Assign the template via Meeting Template Policies to ensure it’s available to organizers.

This approach guarantees compliance with all requirements while preventing organizer overrides.

Microsoft 365 Certified Collaboration Communications Systems Engineer Associate MS-721 certification exam assessment practice question and answer (Q&A) dump including multiple choice questions (MCQ) and objective type questions, with detail explanation and reference available free, helpful to pass the Microsoft Collaboration Communications Systems Engineer MS-721 exam and earn Microsoft 365 Certified Collaboration Communications Systems Engineer Associate certification.