nerdexam
Microsoft

70-663 · Question #32

You have an Exchange Server 2010 organization. You enable journaling in the organization. You need to recommend a solution that prevents administrators from reading confidential e-mail messages sent…

The correct answer is D. Deploy an X.509 certificate from a trusted third-party certification authority (CA) to each. Journal report decryption allows you to save a clear-text copy of IRM-protected messages in journal reports, along with the original, IRM-protected message. If the IRM-protected message contains any supported attachments that were protected by the Active Directory Rights…

Designing Security

Question

You have an Exchange Server 2010 organization. You enable journaling in the organization. You need to recommend a solution that prevents administrators from reading confidential e-mail messages sent between company executives. What should you recommend?

Options

  • ADeploy Active Directory Rights Management Services (AD RMS) templates and create
  • BDeploy Active Directory Rights Management Services (AD RMS) templates and create
  • CDeploy an X.509 certificate from an enterprise certification authority (CA) to each executive.
  • DDeploy an X.509 certificate from a trusted third-party certification authority (CA) to each

How the community answered

(25 responses)
  • A
    4% (1)
  • B
    4% (1)
  • C
    12% (3)
  • D
    80% (20)

Explanation

Journal report decryption allows you to save a clear-text copy of IRM-protected messages in journal reports, along with the original, IRM-protected message. If the IRM-protected message contains any supported attachments that were protected by the Active Directory Rights Management Services (AD RMS) cluster in your organization, the attachments are also In Exchange 2010 SP1, members of the Discovery Management role group can access IRM- protected messages returned by a discovery search and residing in a discovery mailbox. To enable this functionality, use the EDiscoverySuperUserEnabled parameter with Set- IRMConfiguration cmdlet.

Topics

#S/MIME#X.509 certificates#journaling confidentiality#end-to-end encryption

Community Discussion

No community discussion yet for this question.

Full 70-663 Practice