Your network contains an Active Directory forest named contoso.com. The forest contains an
enterprise root certification authority (CA) named CA1. The network contains a server named EX1
that has Exchange Server 2013 installed.
A partner company named
A.Datum Corporation has an Active Directory domain named adatum.com. The domain contains a
server named EX5 that has Exchange Server 2010 Service Pack 2 (SP2) installed. EX5 has a Receive
connector that is configured for mutual TLS.
Users in contoso.com plan to send email messages that contain sensitive data to users in
adatum.com.
You need to ensure that all of the email messages sent from contoso.com to adatum.com are
encrypted by using TLS. The solution must ensure that EX1 and EX5 validate server certificates.
Which three actions should you perform? (Each correct answer presents part of the solution. Choose
three.)
A.
Run the set-transportconfig -tlssenddomainsecurelist contoso.com command.
B.
Install a certificate, and then assign the certificate to the IIS service. Send the root certificate for
contoso.com to the administrators in adatum.com.
C.
Run the New-SendConnector cmdlet and specify the domainsecureenabled parameter.
D.
Run the New-SendConnector cmdlet and specify the tlsdomainparameter.
E.
Run the set-transportconfig -tlssenddomainsecurelist adatum.com command.
F.
Install a certificate, and then assign the certificate to the SMTP service. Send the root certificate
for contoso.com to the administrators in adatum.com.
Set-TransportConfig TLSSendDomainSecureList parameter specifies the domains FROM WHICH YOU WANT TO SEND domain secured email by using mutual TLS authentication.
To fully support mutual TLS authentication, you must also perform the following steps:
…
–Enable Domain Security (Mutual Auth TLS) on the Send connectors that send messages to the domains that you specified in the TLSSendDomainSecureList parameter.
DomainSecureEnabled parameter enables mutual Transport Layer Security (TLS) authentication for the domains serviced by the Send connector when set to $true. The default value for the DomainSecureEnabled parameter is $false for the following types of Send connectors:
-Those defined in the Transport service on a Mailbox server.
0
0