Exam 70-345 topic 1 question 101 discussion

Actual exam question from Microsoft's 70-345

Question #: 101
Topic #: 1

You have an Exchange Server 2016 organization.
You have a user named User1 who must send encrypted email messages to a user named User2 in another organization.
User1 and User2 have certificates issued from a trusted third-party certification authority (CA).
You need to ensure that User1 can send the encrypted email messages to User2.
What should you do first?

A. Instruct User2 to send a digitally signed email message to User1.
B. Instruct User2 to create a Certificate Signing Request (CSR). Send the CSR to User1.
C. Instruct User1 to send a digitally signed email message to User2
D. Instruct User1 to create a Certificate Signing Request (CSR). Send the CSR to User2

Show Suggested Answer

Suggested Answer: A 🗳️
Sending and viewing encrypted email messages requires both sender and recipient to share their digital ID, or public key certificate. This means that you and the recipient each must send the other a digitally signed message, which enables you to add the other person's certificate to your Contacts. You can't encrypt email messages without a digital ID. So if this is a first time deal then send a digitally signed document at first, once they respond with their own digitally signed email, then you can start encrypting.
To encrypt messages, you can use the public-key cryptographic system. In this system, each participant has two separate keys: a public encryption key and a private decryption key. When someone wants send you an encrypted message, he or she uses your public key to generate the encryption algorithm. When you receive the message, you must use your private key to decrypt it.
References:
https://www.sslsupportdesk.com/digitally-signing-encrypting-email-messages-outlook-guide/ https://support.mozilla.org/en-US/kb/digitally-signing-and-encrypting-messages

by l1f3rl at March 10, 2020, 4:47 p.m.