Your company has a hybrid deployment of Office 365. You need to identify which certificate is used for token
signing between the on-premises environment and Office 365. Which tool should you use?

A.
The Exchange Management Console.

B.
The AD FS 2.0 Management console.

C.
The Active Directory Domains and Trusts snap-in.

D.
The Office 365 portal.

E.
The Certificates snap-in.

Explanation:
AD FS creates a self-signed certificate by default. You are able to modify this certificate to a CA-issued
certificate by using the AD FS management snap-in. Therefore it stands to reason that to identify which
certificate is used for token signing between the on-premises environment and Office 365, you would have to
access the AD FS 2.0 Management console.
https://technet.microsoft.com/en-us/library/hh563848(v=exchg.150).aspx