A corporate environment includes Active Directory Domain Services (AD DS). The environment
consists of an internal network and a perimeter network. AD DS is deployed only on the internal
network. The company intends to utilize a service providers cloud-based Exchange Server 2010 SP1
email service. You have the following requirements:
• Maximize the security of the design.
• Use the minimum permissions required to perform directory synchronization.
You need to recommend a solution for directory synchronization between the corporate
environment and the service providers environment. Which two actions should you recommend?
(Each correct answer presents part of the solution. Choose two.)

A.
Install the directory synchronization tool on a computer in the perimeter network.

B.
Install the directory synchronization tool on a computer on the internal network.

C.
Create a directory synchronization service account with membership in the Domain Users group.

D.
Create a directory synchronization service account with membership in the Domain Admins
group.

Explanation: