Your company has an Exchange Server 2016 organization and a Microsoft Office 365 subscription configured in a hybrid deployment.
You configure the synchronization of on-premises Active Director
y accounts to Office 365.
All users connect to email services by using Outlook 2016.
You plan to deploy Office 365 Message Encryption for the mailboxes of two executives named Exec1 and Exec2. The mailboxes are hosted in Office 365.
You need to recommen
d which actions must be performed to ensure that all of the email messages sent from Exec1 and Exec2 to any recipient on the Internet are encrypted.
Which two actions should you recommend? Each correct answer presents part of the solution.
A. Deploy Micr
osoft Azure Rights Management (Azure RMS) to the Office 365 subscription.
B. Deploy Active Directory Rights Management Services (AD RMS) to the network.
C. Run the
Set-MsolUserLicense
cmdlet.
D. From the Office 365 Exchange admin center, create a rule.
E.
Install a certificate on the computer of Exec1 and the computer of Exec2.
F. From the on-premises Exchange admin center, create a transport rule.
Explanation:
A: Office 365 Message Encryption requires the Azure Rights Management service. Once
you have a subscription to this service, you can activate it.
Note: Encryption options for Office 365:
Azure RMS, including both IRM capabilities and OME
S/MIME
TLS
Encryption of data at rest (through BitLocker)
F: As an administrator, you can create
transport rules to enable Microsoft Office 365 Message Encryption. This lets you encrypt any outgoing email messages and remove encryption from encrypted messages coming from inside your organization or from replies to encrypted messages sent from your org
anization.
To use the transport rule to encrypt messages, your organization must have Windows Azure Rights Management set up for Office 365 Message Encryption.
References:https://docs.microsoft.com/en-us/rights-management/deploy-use/activate-service
https
://technet.microsoft.com/en-us/library/dn569289.aspx