Hotspot Question
You deploy an Exchange Server 2016 organization. The organization contains two servers. The
servers are configured as shown in the following table:
The default self-signed certificates are installed on both servers. All of the users in the organization
work from home and from customer locations. You purchase a Layer 7 hardware-based load
balancer. You configure SSL bridging without session affinity for Outlook on the web connections.
The load balancer has an internal fully qualified domain name (FQDN) of Ib1 contoso.local. DNS
servers are configured to resolve mail.contoso.com names to the external IP address of the load
balancer. You need to recommend which names must be included in the certificates installed on
the load balancers and the Exchange servers. What should you recommend for each certificate?
To answer, select the appropriate options in the answer area.
Answer: 
Agree with Ted from another version.
To me it is:
mail.contoso.com
ex01.contoso.com
ex02.contoso.com
Correct answer is:
mail.contoso.com
ex01.contoso.local
ex02.contoso.local
After some research, I agree.
mail.contoso.com
ex01.contoso.local
ex02.contoso.local
https://technet.microsoft.com/en-us/library/jj898588(v=exchg.160).aspx