Your company has a hybrid deployment of Office 365. You need to identify which certificate is used for token signing between the on-premises environment and Office 365. Which tool should you use? certificate by using the AD FS management snap-in. Therefore it stands to reason that to identify which certificate is used for token signing between the on-premises environment and Office 365, you would have to access the AD FS 2.0 Management console.

A.
The Exchange Management Console.

B.
The AD FS 2.0 Management console.

C.
The Active Directory Domains and Trusts snap-in.

D.
The Office 365 portal.

E.
The Certificates snap-in.

Explanation:

AD FS creates a self-signed certificate by default. You are able to modify this certificate to a CA-issued
References: https://technet.microsoft.com/en-us/library/hh563848(v=exchg.150).aspx