Is Just-in-Time (JIT) protection in SC-401 encryption?

The question

Hi - i’ve been loving the guides but i think there’s an error on how you’ve explained JIT in cs 400. The microsoft documentation explains it as a temporary pause of a risky action for unclassified / stale files until dlp policies can evaluate it but it’s written as an encryption?

The answer

Hi Phoebe — thank you, you’re absolutely right (and yes, SC-401). The lesson wrongly described Just-in-time (JIT) protection as “encryption.” It isn’t.

JIT temporarily blocks a risky egress action (copy to USB, print, upload, etc.) on a file DLP hasn’t evaluated yet — or whose classification is stale — while Purview checks it against your DLP policies. It then allows or blocks based on the result, with a configurable fallback (Allow or Block) if evaluation can’t complete. No encryption is involved — that’s a separate capability provided by sensitivity labels.

I’ve rewritten the JIT section (intro, table, scenario, flashcard and the knowledge-check) to match, and fixed a related table cell. Ironically our own SC-401 practice questions already had it right, which is what tipped me off.

Thanks for the sharp catch and for using the guides! — Sush