All exchange personnel have to authenticate and connect to virtual private network in order to access
exchange admin services. This means that no strangers can even send a network packet to the exchange internal services.
Within this network all traffic is secured with asymmetric encryption, potential attacker from the internet won’t be able to hijack it even if she and exchange employee are sitting in the same restaurant and use same Wi-Fi network.
This private network is setup in away to block any users trying to connect from unknown location.