You are a network administrator for a company named Contoso, Ltd.
You install the Active Directory Rights Management Services server role on a server. The Active Directory Rights Management Services (AD RMS) server uses an internal certification authority (CA) for all certificates.
You plan to provide users with the ability to use AD RMS to protect all of the email messages sent to a partner company named ADatum Corporation.
ADatum does not have AD RMS deployed.
You need to identify which components from the Contoso network must be accessible to ADatum to ensure that the users at ADatum can open protected messages.
Which two components should you identify? (Each correct answer presents part of the solution. Choose two.)