You are the Exchange administrator for your company. The network consists of an intranet segment and a perimeter network.
A server named ISA1 runs Microsoft Internet Security and Acceleration (ISA) Server and connects the perimeter network to the Internet.
The network contains two servers named Exch1 and Mail1. Both servers run Exchange Server 2003. Exch1 is connected to the perimeter network and is configured as a frontend server.
Exch1 also hosts Microsoft Outlook Web Access. Mail1 is connected to the intranet and is configured as a backend server. Mail1 hosts all user mailboxes.
The firewall between the intranet and the perimeter network is configured to allow RPC communications between Mail1 and Exch1.
A company investigator discovers that confidential email messages are sometimes intercepted when remote users connect to Outlook Web Access on Exch1.
You need to ensure that all Outlook Web Access communications from the Internet are encrypted.
Your solution must require the minimum amount of encryptionrelated processing on Exch1. What should you do?
A.
Configure ISA1 to allow HTTPS traffic between the Internet and Exch1. Instruct employees to connect to Exch1 by using HTTPS instead of HTTP.
B.
Configure ISA1 to reverse proxy Outlook Web Access from Exch1. Configure Exch1 and ISA1 to use IPSec encryption when they communicate.
C.
Install a server encryption certificate on ISA1. Configure ISA1 to reverse proxy Outlook Web Access from Exch1 and to require SSL encryption. Configure ISA1 to transmit unencrypted data to Exch1. Instruct employees to connect to Exch1 by using HTTPS instead of HTTP.
D.
Install a server encryption certificate on Exch1. Configure ISA1 to open the HTTPS port for incoming traffic from the Internet to Exch1, and to allow outgoing HTTPS replies from Exch1 to the Internet. Configure the Outlook Web Access virtual Web server to require SSL encryption for all connections.
Explanation:
You need to ensure that all Outlook Web Access communications from the Internet are encryptedthis means:Encrypt traffic between configure Exch1
(Front end server) and Company 1 (backend server) to use IPSec encryption when they communicate and configure ISA.
Incorrect answers:
A: This option does not encrypt front end to back end traffic. You must enforce encryption.
B: You need to Encrypt traffic between configure Exch1 and Company 1.
C: With this option you will have unencrypted data going to Exch1 and users are connecting to Exch1, The option to use ISA in this way is not needed.