You have an Exchange Server 2013 organization.
A distribution group named Sales_Reports is used to distribute confidential information to all of the
senior managers in your company.
You need to recommend a solution to ensure that all unencrypted messages sent to the
Sales_Reports group are encrypted on the server automatically before they are stored in the
mailboxes of the managers.
Which two technologies should you include in the recommendation? Each correct answer presents
part of the solution.
A.
A transport rule
B.
S/MIME
C.
Active Directory Certificate Services (AD CS)
D.
Active Directory Rights Management Services (AD RMS)
E.
TLS
Explanation:
A: As an administrator, you can create transport rules to enable Microsoft Office 365 Message
Encryption. This service lets you encrypt outgoing email messages and remove encryption from
incoming encrypted replies to those messages, depending on conditions defined in the rule.
B: Encrypted e-mail messages
Messages that are encrypted using S/MIME. Transport rules can access envelope headers contained
in encrypted messages and process messages based on predicates that inspect them. Rules with
predicates that require inspection of message content, or actions that modify content, can’t be
processed.Understanding How Transport Rules Are Applied
https://technet.microsoft.com/en-us/library/bb124703%28v=exchg.141%29.aspx
Answers should be A and D because you cannot enforced encryption using S/MIME and overall you cannot inspect and apply any modification to the message on the transport pipeline once the message has been protected by S/MIME.
Transport Decryption is applied just with IRM
https://technet.microsoft.com/en-us/library/dd638122(v=exchg.150).aspx
https://technet.microsoft.com/en-us/library/dd351127(v=exchg.150).aspx
0
0
Agree
0
0
https://technet.microsoft.com/en-us/library/dn626158(v=exchg.150).aspx
0
0