Exam MS-203 All Questions

View all questions & answers for the MS-203 exam

Exam MS-203 topic 1 question 27 discussion

Actual exam question from Microsoft's MS-203

Question #: 27
Topic #: 1

You have a hybrid deployment between a Microsoft Exchange Online tenant and an on-premises Exchange Server 2019 organization. The on-premises organization contains several Exchange Server 2019 servers.
You discover that delivery fails for all email messages sent from the on-premises organization to Microsoft 365.
You discover that the certificate for an on-premises Exchange server expired.
You need to resolve the issue as quickly possible. The solution must minimize administrative effort.
What should you do on the on-premises Exchange server?

A. Create a new self-signed certificate.
B. Generate a certificate renewal request.
C. Generate a certificate request.
D. Add the certificate for a new root certification authority (CA).

Show Suggested Answer

Suggested Answer: C 🗳️

by fred at Feb. 20, 2021, 9:07 a.m.

Comments

Submit Cancel

fred

Highly Voted 3 years, 4 months ago

ok after search self-signed not supported for hybrid https://docs.microsoft.com/en-us/exchange/hybrid-deployment/troubleshoot-a-hybrid-deployment A false because self not supported B false because you cannot renew a expired certificat C correct you need to request a new certificat because the old is expired D false because you need to request before add

upvoted 15 times

MFT88

3 years, 3 months ago

I could not find any docs mentioning you cannot renew an expired certificate. Answer is correct in my opinion.

upvoted 4 times

alex_p

2 years, 1 month ago

Try to renew an expired one and will see

upvoted 4 times

...

sarfrazaslam

3 years, 3 months ago

New certificate option can be used if we have to change a CA, for this a new CSR would be required. With the existing Renew request will work

upvoted 3 times

...

fred

Highly Voted 3 years, 4 months ago

you cannot renew an expired certificat, you can renew a certificat if it is valid. the answer is wrong, response c is correct for me

upvoted 6 times

Alexandersss

2 years, 8 months ago

but also no, it is possible to generate certificates in exchange! https://docs.microsoft.com/it-it/exchange/architecture/client-access/renew-certificates?view=exchserver-2019

upvoted 1 times

...

Xtian_ar

Most Recent 6 months, 2 weeks ago

Selected Answer: C

Correct answer is C. You cannot renew an expired certificate, in the following article says "All valid certificates have a Renew link in the details pane...", if a certificate has expired, is not valid. https://learn.microsoft.com/en-us/exchange/architecture/client-access/renew-certificates?view=exchserver-2019#use-the-eac-to-create-a-certificate-renewal-request-for-a-certification-authority

upvoted 2 times

...

2 years, 4 months ago

exam dated 26-jan-22

upvoted 4 times

...

Maroslaw

2 years, 5 months ago

Selected Answer: C

Answer: C

upvoted 3 times

...

SCT

2 years, 7 months ago

I believe is C

upvoted 2 times

...

AshokBoinpally

3 years, 3 months ago

fred answer is right. You can NOT renew an expired certificate. Ref: https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/dd378790(v=ws.10)?redirectedfrom=MSDN

upvoted 3 times

UWSFish

2 years, 3 months ago

This article is TEN YEAR OLD

upvoted 2 times

...

King2

3 years, 3 months ago

Given answer seems to be correct. https://docs.microsoft.com/en-us/exchange/architecture/client-access/renew-certificates?view=exchserver-2019 To renew a certificate that was issued by a CA, you create a certificate renewal request, and then you send the request to the CA. The CA then sends you the actual certificate file that you need to install on the Exchange server.

upvoted 3 times

...

fred

3 years, 4 months ago

and exchange support for some service a self-signed certificat, for less administrative effort the response A is correct

upvoted 2 times

...