DRAG DROP
You have an Exchange Server 2013 organization that has Information Rights Management (IRM)
configured.
Users report that they cannot apply IRM protection to email messages from Outlook Web App.
You verify that the users can protect the messages by using IRM from Microsoft Outlook.
You need to recommend a solution to ensure that the users can protect email messages by using
IRM from Outlook Web App.
Which four actions should you recommend?
To answer, move the four appropriate actions from the list of actions to the answer area and
arrange them in the correct order.
Answer: 
I believe the last option is used with the ClientAccessServerEnabled parameter
The ClientAccessServerEnabled parameter specifies whether to enable IRM in Microsoft Outlook on the web and in Microsoft Exchange ActiveSync.
1) Configure a mail-enabled distribution group as a super users group in AD RMS.
2) To enable IRM in Outlook Web App, you must add the Federation mailbox to the super users group in AD RMS.
3) Enable Super Users
4) When IRM is enabled on Client Access servers, Outlook Web App users can IRM-protect messages: Set-IRMConfiguration -ClientAccessServerEnabled $true