You have an exchange Server 2016 organization that uses an SMTP domain named contoso.com.
You need to encrypt all of the SMTP traffic from the organization to a partner organization. The partner
organization uses an SMTP domain named litwareinc.com.
Which three commands should you run on your server? Each correct answer presents part of the solution.
A.
New-ReceiveConnector-Name “Connector1”-Usage Internet- Bindings 0.0.0.0:587-DomainSecureEnabled:
$true
B.
Set-TransportConfig-TLSSendDomainSecureList litwareinc.com
C.
New-SendConnector-Usage Partner-Name “Connector1” –AddressSpaces “lintwareinc.com” –
IgnoreSTARTTLS $false-DNSRoutingEnabled $true -DomainSecureEnabled $true
D.
Set-TransportConfig- TLSReceiveDomainSecureList contoso.com
E.
Set-TransportConfig-TLSReceiveDomainSecureList litwareinc.com
F.
New-SendConnector- Usage Partner –Name “Connector1” –AddressSpaces “contoso.com” –
IgnoreSTARTTLS $false-DNSRoutingEnabled $ture –DomainSecureEnabled $true
G.
Set-TransportConfig-TLSSendDomainSecureList contoso.com
Explanation:
http://dizdarevic.ba/ddamirblog/?p=78
https://technet.microsoft.com/en-us/library/bb124151(v=exchg.160).aspx
https://technet.microsoft.com/en-us/library/aa998936(v=exchg.160).aspx
C,E,G as per links provided
1
1
I think should be B, C, E.
Based on “Using Domain Security: Configuring Mutual TLS” https://technet.microsoft.com/en-us/library/bb123543(v=exchg.141).aspx, for both TLSSendDomainSecureList and TLSReceiveDomainSecureList are set to partner domain, woodgrovebank.com in Set-TransportConfig.
Also see: http://techgenix.com/exchange-2010-domain-security-part2/
8
2
If you read the link it says:
“It’s relatively straightforward to specify the domain with which you want to send domain-secured e-mail. The Contoso administrator runs the following command on an internal Exchange 2010 server.”
In our case the domain with which we want to send is contoso.com, so:
Set-TransportConfig-TLSSendDomainSecureList contoso.com
0
3
Agree. -TLSSendDomainSecureList is for the outgoing domain contoso.com which rules out answer B. The given answer C,E,G is correct
0
0
Agree with John.
https://technet.microsoft.com/en-us/library/bb123543(v=exchg.141) as provided by John.
Step 3a: Specify the Sender Domain in Transport Configuration
Set-TransportConfig -TLSSendDomainSecureList woodgrovebank.com
Step 3b: Configure the Default Send Connector
Set-SendConnector Internet -DomainSecureEnabled:$true
Step 4: Configure Inbound Domain Security
Set-TransportConfig -TLSReceiveDomainSecureList woodgrovebank.com
It is the same scenario as question but instead of litwareinc.com it has used woodgrovebank.com
2
1
Agree with John, Good link John
2
0
It is C E G
The TLSSendDomainSecureList parameter specifies the domains from which you want to send domain secured email by using mutual TLS authentication
https://technet.microsoft.com/en-us/library/bb124151(v=exchg.160).aspx
Setting up TLS example:
Set-TransportConfig -TLSSendDomainSecureList exchangequery.com – for sending secure emails from Exchange query to toybox
Set-TransportConfig –TLSReceiveDomainSecureList toybox.com – for receiving secure emails from toybox.com
https://exchangequery.com/category/tls/
3
2
Agree according to https://docs.microsoft.com/en-us/powershell/module/exchange/mail-flow/Set-TransportConfig?view=exchange-ps!
1
1