Exam 70-345 topic 4 question 6 discussion

Actual exam question from Microsoft's 70-345

Question #: 6
Topic #: 4

You plan to configure the Exchange organization for site failovers.
You need to recommend how many certificates must be deployed to meet the availability requirements and the security requirements.
What is the minimum number of certificates you should recommend deploying?

A. one
B. two
C. three
D. four

Show Suggested Answer

Suggested Answer: C 🗳️
Some services, such as Outlook Anywhere and Exchange ActiveSync, require certificates to be configured on your Exchange 2016 server.
From scenario: Security Requirements
Contoso identifies the following security requirements for the planned deployment:
✑ Users must be able to access their mailbox by using Exchange ActiveSync on the company-approved tablets only.
✑ Email messages sent from the users in the human resources department of Contoso must be protected by using AD RMS, regardless of the mail client.
✑ Email messages sent to the users in the fabrikam.com SMTP domain must be encrypted automatically.

And others -
✑ Exchange Server mailbox databases must be encrypted while at rest.
✑ Users must be prevented from using Outlook on the web while they are offline.
✑ Contoso users must be able to share Calendar details with approved external domains only.
✑ Whenever possible, client computers must be directed to the same Exchange server for log collection.
References:
https://technet.microsoft.com/en-us/library/mt441782(v=exchg.150).aspx

by l1f3rl at March 6, 2020, 3:28 p.m.

Comments

Submit Cancel

l1f3rl

Highly Voted 5 years, 2 months ago

Imo should be A) , You can add the required names in one certificate .

upvoted 6 times

pepeold

4 years, 4 months ago

i would also go with A; but then there is such thing as if that one certificate gets compromised you will need to reissue it and adjust all the services instead of one. MS way would be probably 3 certificates

upvoted 2 times

Harry83

4 years, 4 months ago

I agree, the minimum number of certificates for Exchange Web Services (autodiscover.contoso.com + mail.contoso.com) & SMTPs & Office Online Servers is ONE if we choose to rely either on a wildcard certificate, either on a SAN certificate. It correspond to what can I see on most of the deployment. Of course on a security perspective, it is better to have a dedicated certificate for each workload but it is more complex to maintain & as the security requirements do not tell anything about that, I would go for one certificate.

upvoted 2 times

...

Mike0815

Most Recent 4 years, 6 months ago

subject alternative names

upvoted 1 times

...

Exam 70-345 All Questions

View all questions & answers for the 70-345 exam