All users must be protected from accessing unsecure websites when they click on URLs embedded in email messages.
Overview
Litware, Inc. is food service supplier in Europe.
Topic 3, Fabrikam, Inc
To start the case study
To display the first question in this case study, click the Next button. Use the buttons in the left pane to explore the content of the case study before you answer the questions. Clicking these buttons displays information such as business requirements, existing environment, and problem statements. If the case study has an All Information tab, note that the information displayed is identical to the information displayed on the subsequent tabs. When you are ready to answer a question, click the Question button to return to the question.
Overview
Fabrikam, Inc. is a consulting company that has a main office in Montreal.
Fabrikam has a partnership with a company named Litware, Inc.
Existing Environment
Network Environment
The on-premises network of Fabrikam contains an Active Directory domain named fabrikam.com.
Fabrikam has a Microsoft 365 tenant named fabrikam.com. All users have Microsoft 365 Enterprise E5 licenses.
User accounts sync between Active Directory Domain Services (AD DS) and the Microsoft 365 tenant.
Fabrikam.com contains the users and devices shown in the following table.

Fabrikam currently leases mobile devices from several mobile operators.
Microsoft Exchange Online Environment
All users are assigned an Outlook Web App policy named FilesPolicy.
In-Place Archiving is disabled for Exchange Online.
You have the users shown in the following table.

User1 and User3 use Microsoft Outlook for iOS and Android to access email from their mobile device. User2 uses a native Android email app.
A Safe Links policy in Microsoft Defender for Office 365 is applied to the fabrikam.com tenant. The marketing department uses a mail-enabled public folder named FabrikamProject.
Default MRM Policy is disabled for the fabrikam.com tenant.
Problem Statements
Fabrikam identifies the following issues:
Users report that they receive phishing emails containing embedded links.
Users download and save ASPX files when they use Outlook on the web.
Email between Fabrikam and Litware is unencrypted during transit.
User2 reports that he lost his mobile device.
Requirements
Planned Changes
Fabrikam plans to implement the following changes:
Configure FilesPolicy to prevent Outlook on the web users from downloading attachments that have the ASPX extension.
Purchase a new smartboard and configure the smartboard as a booking resource in Exchange Online.
Ensure that the new smartboard can only be booked for a maximum of one hour.
Allow only Admin1 to accept or deny booking requests for the new smartboard.
Standardize mobile device costs by moving to a single mobile device operator.
Migrate the FabrikamProject public folder to Microsoft SharePoint Online.
Enable In-Place Archiving for users in the marketing department.
Encrypt all email between Fabrikam and Litware.
Technical Requirements
Fabrikam identifies the following technical requirements:
Ensure that the planned Sharepoint site for FabrikamProject only contains content that was created during the last 12 months.
Any existing file types that are currently configured as blocked or allowed in the FilesPolicy policy must remain intact.
When users leave the company, remove their licenses and ensure that their mailbox is accessible to Admin1 and Admin2.
Generate a report that identifies mobile devices and the mobile device operator of each device.
Use the principle of least privilege.
Minimize administrative effort.
Retention Requirements
Fabrikam identifies the following retention requirements for all users:
Enable users to tag items for deletion after one year.
Enable users to tag items for deletion after two years.
Enable users to tag items to be archived after one year.
Automatically delete items in the Junk Email folder after 30 days.
Automatically delete items in the Sent Items folder after 300 days.
Ensure that any items without a retention tag are moved to the Archive mailbox two years after they were created and permanently deleted seven years after they were created.

c) Create a connector1. A connector is a configuration setting that controls how email messages are delivered to or received from your own email servers or a partner organization1. You need to create a connector to route mail between Exchange Online and your on-premises alarm system that uses SMTP1. You can specify the IP address of your alarm system as a trusted sender and configure the connector to use certificate-based authentication or IP address-based authentication1.
e) Configure direct send2. Direct send is an option that allows you to send mail directly from your printer or application to Microsoft 365 or Office 365 without using a local email server2. You need to configure direct send on your alarm system settings to use an MX record of the tenant as the SMTP server address2. For example, contoso-com.mail.protection.outlook.com2. Direct send does not require TLS encryption or SMTP authentication2.

You need to remove the remote domains first then assign a license to the user account.

Reference:
https://docs.microsoft.com/en-us/exchange/permissions-exo/feature-permissions