You are designing an Exchange organization for a company named Contoso, Ltd. All servers in the organization will have Exchange Server 2010 Service Pack 1 (SP1) installed. Contoso has a partner company named Fabrikam, Inc. Fabrikam has an Exchange organization that contains only Exchange Server 2010 SP1 servers. You plan to configure a federation trust between Fabrikam and Contoso.
You need to recommend a certificate for the federation trust.
Which of the following certificates is the best recommendation? (More than one answer choice may achieve the goal. Select the BEST answer.)
A.
a certificate from a third-party certification authority (CA)
B.
a certificate from an internal certification authority (CA)
C.
the self-signed certificate automatically generated by the Exchange 2010 Setup wizard
D.
the self-signed certificate automatically generated by the New Federation Trust wizard
Should be A
I think D is correct…
“In Exchange 2010 SP1, you can use a self-signed certificate instead of a certificate issued by a Certificate Authority to establish a federation trust with the Microsoft Federation Gateway. A self-signed certificate is automatically created and installed on Exchange servers in your organization when you use the New Federation Trust wizard in the Exchange Management Console. For more information, see Understanding Federation.”
http://technet.microsoft.com/en-us/library/ff459257(v=exchg.141).aspx