Your company has an Exchange Server 2016 organization and a Microsoft Office 365 subscription configured
in a hybrid deployment.
You configure the synchronization of on-premises Active Directory accounts to Office 365.
All users connect to email services by using Outlook 2016.
You plan to deploy Office 365 Message Encryption for the mailboxes of two executives named Exec1 and
Exec2. The mailboxes are hosted in Office 365.
You need to recommend which actions must be performed to ensure that all of the email messages sent from
Exec1 and Exec2 to any recipient on the Internet are encrypted.
Which two actions should you recommend? Each correct answer presents part of the solution.
A.
Deploy Microsoft Azure Rights Management (Azure RMS) to the Office 365 subscription.
B.
Deploy Active Directory Rights Management Services (AD RMS) to the network.
C.
Run the Set-MsolUserLicense cmdlet.
D.
From the Office 365 Exchange admin center, create a rule.
E.
Install a certificate on the computer of Exec1 and the computer of Exec2.
F.
From the on-premises Exchange admin center, create a transport rule.
Explanation:
A: Office 365 Message Encryption requires the Azure Rights Management service. Once you have asubscription to this service, you can activate it.
Note: Encryption options for Office 365:
Azure RMS, including both IRM capabilities and OME
S/MIME
TLS
Encryption of data at rest (through BitLocker)
F: As an administrator, you can create transport rules to enable Microsoft Office 365 Message Encryption. This
lets you encrypt any outgoing email messages and remove encryption from encrypted messages coming from
inside your organization or from replies to encrypted messages sent from your organization.
To use the transport rule to encrypt messages, your organization must have Windows Azure Rights
Management set up for Office 365 Message Encryption.
https://docs.microsoft.com/en-us/rights-management/deploy-use/activate-service
https://technet.microsoft.com/en-us/library/dn569289.aspx
AF are correct as per the links provided
7
3
Should be A,D? The user mailboxes are hosted in Office 365, you need create the a rule on Office 365 Exchange admin center. Based on the link https://technet.microsoft.com/en-us/library/dn569289.aspx, it also explain create rule on O365 EAC.
3
1
No John, this is for hybrid deployment
In hybrid, you manage from EAC. Not O365 admin center
3
3
You can sign into O365 Ex admin center from the EAC but you are no longer managing from the EAC – it is just a link. They are separate Ex Organasations managed separately
0
0
Agree A and D. Cloud mailboxes so cloud rules. Transport rules don’t work across Exchange Orgs. Here is the updated support article https://support.office.com/en-us/article/define-mail-flow-rules-to-encrypt-email-messages-in-office-365-9b7daf19-d5f2-415b-bc43-a0f5f4a585e8?ui=en-US&rs=en-US&ad=US
3
0
A,D offcourse… There are separate rules in on-premises and in the coud.
https://technet.microsoft.com/en-us/library/ff645372(v=exchg.141).aspx
“Transport Rules and Journaling rules aren’t synchronized between your on-premises deployment and your Exchange Online organization.”
4
2
Your link applies to Exchange Server 2010 SP2, Exchange Server 2010 SP3.
Does not seem to apply to exchange server 2016, So I will go for A and F
1
0