Explanation/Reference:
Explanation:
Some services, such as Outlook Anywhere and Exchange ActiveSync, require certificates to be configured on your Exchange 2016 server.
From scenario: Security Requirements
Contoso identifies the following security requirements for the planned deployment:
Users must be able to access their mailbox by using Exchange ActiveSync on the company-approved

tablets only.
Email messages sent from the users in the human resources department of Contoso must be protected

by using AD RMS, regardless of the mail client.
Email messages sent to the users in the fabrikam.com SMTP domain must be encrypted automatically.

And others
Exchange Server mailbox databases must be encrypted while at rest.

Users must be prevented from using Outlook on the web while they are offline.

Contoso users must be able to share Calendar details with approved external domains only.

Whenever possible, client computers must be directed to the same Exchange server for log collection.

References: https://technet.microsoft.com/en-us/library/mt441782(v=exchg.150).aspx