A company uses Exchange Online. You have configured the new Human Resources ERP on-premises server as an SMTP relay device, so it can send emails on behalf of your exchange domain to your company…

Question

Options

• AVerify the certificate subject name of the sending server.
• BVerify the public IP address of the sending server.
• CVerify the private IP address of the sending server.
• DVerify the FQDN of the sending server.

• A
  77% (36)
• C
  15% (7)
• D
  9% (4)

Explanation

You can authenticate incoming messages in two ways: - Verify the certificate subject name of the sending server. - Verify the public IP address of the sending server. For the first option, you can configure the domain certificate in the Authenticating sent email text box within settings. You can use either a child domain or a wildcard domain for this. A Certificate Authority (CA) signed certified is usually tied to a company domain name and it is specified in the certificate Subject field. Once the sending server sends the request with the assigned certificate, it will be only authenticated successfully if the certificate subject name matches with the domains you have configured. For the second option, if you know the public IP address or subnet range, you can just configure one of them and the request will be successfully authenticated if it originates from the configured source public IP. You should not verify the private IP address of the sending server. Since the device is behind the Network Address Translation (NAT) router, the private IP will always get translated to the public Wide Area Network (WAN) IP when the message is sent towards the online mail server. You should not verify the Fully Qualified Domain Name (FQDN) of the sending server. In the connector, you can only configure IP addresses for authentication, there is no option to configure

No community discussion yet for this question.