You have an exchange Server 2016 organization that uses an SMTP domain named contoso.com.
You need to encrypt all of the SMTP traffic from the organization to a partner organization. The partner
organization uses an SMTP domain named litwareinc.com.
Which three commands should you run on your server? Each correct answer presents part of the solution.
A.
New-ReceiveConnector-Name “Connector1”-Usage Internet- Bindings 0.0.0.0:587-DomainSecureEnabled:
$true
B.
Set-TransportConfig-TLSSendDomainSecureList litwareinc.com
C.
New-SendConnector-Usage Partner-Name “Connector1” –AddressSpaces “lintwareinc.com” –
IgnoreSTARTTLS $false-DNSRoutingEnabled $true -DomainSecureEnabled $true
D.
Set-TransportConfig- TLSReceiveDomainSecureList contoso.com
E.
Set-TransportConfig-TLSReceiveDomainSecureList litwareinc.com
F.
New-SendConnector- Usage Partner –Name “Connector1” –AddressSpaces “contoso.com” –
IgnoreSTARTTLS $false-DNSRoutingEnabled $ture –DomainSecureEnabled $true
G.
Set-TransportConfig-TLSSendDomainSecureList contoso.com
Explanation:
http://dizdarevic.ba/ddamirblog/?p=78
https://technet.microsoft.com/en-us/library/bb124151(v=exchg.160).aspx
https://technet.microsoft.com/en-us/library/aa998936(v=exchg.160).aspx
C,E,G as per links provided
I think should be B, C, E.
Based on “Using Domain Security: Configuring Mutual TLS” https://technet.microsoft.com/en-us/library/bb123543(v=exchg.141).aspx, for both TLSSendDomainSecureList and TLSReceiveDomainSecureList are set to partner domain, woodgrovebank.com in Set-TransportConfig.
Also see: http://techgenix.com/exchange-2010-domain-security-part2/
Agree with John.
https://technet.microsoft.com/en-us/library/bb123543(v=exchg.141) as provided by John.
Step 3a: Specify the Sender Domain in Transport Configuration
Set-TransportConfig -TLSSendDomainSecureList woodgrovebank.com
Step 3b: Configure the Default Send Connector
Set-SendConnector Internet -DomainSecureEnabled:$true
Step 4: Configure Inbound Domain Security
Set-TransportConfig -TLSReceiveDomainSecureList woodgrovebank.com
It is the same scenario as question but instead of litwareinc.com it has used woodgrovebank.com