You have an Exchange Server 2010 organization and an Active Directory Rights Management
Services (AD RMS) server. All users access their mailboxes by using Outlook Web App (OWA).
You need to plan a security solution for the organization to meet the following requirements:
• Secure messages by using administrator-defined templates
• Ensure that e-mail messages sent by users can be stored in an encrypted format
What should you include in the plan?

A.
a legal hold

B.
Domain Security

C.
Outlook Protection Rules

D.
Secure/Multipurpose Internet Mail Extensions (S/MIME)

Explanation:
Information workers exchange sensitive information such as financial reports and data, customer
and employee information, and confidential product information and specifications, by e-mail
everyday. In Microsoft Exchange Server 2010, Microsoft Outlook, and Microsoft Office Outlook Web
App, users can apply Information Rights Management (IRM) protection to messages by applying an

Active Directory Rights Management Services (AD RMS) rights policy template. This requires an AD
RMS deployment in the organization. For more information about AD RMS, see Active Directory
Rights Management Services.
However, when left to the discretion of users, messages may be sent in clear text without IRM
protection. In organizations that use e-mail as a hosted service, there’s a risk of information leakage
as a message leaves the client and is routed and stored outside the boundaries of an organization.
Although e-mail hosting companies may have well-defined procedures and checks to help mitigate
the risk of information leakage, after a message leaves the boundary of an organization, the
organization loses control of the information. Outlook protection rules can help protect against this
type of information leakage.
In Exchange 2010, Outlook protection rules help your organization protect against the risk of
information leakage by automatically applying IRM-protection to messages in Outlook 2010.
Messages are IRM-protected before they leave the Outlook client. This protection is also applied to
any attachments using supported file formats.
When you create Outlook protection rules on an Exchange 2010 server, the rules are automatically
distributed to Outlook 2010 by using Exchange Web Services. For Outlook 2010 to apply the rule, the
AD RMS rights policy template you specify must be available on users’ computers.