Account Configuration12% of the exam

SAP domains, dedicated IPs and SSL certificates

What a Sender Authentication Package adds to one business unit compared with a private domain or dedicated IP bought alone, and how volume, IP capacity, SSL licences, CloudPages domains, rebrands and BIMI shape the recommendation.

Official exam objective
Analyze the impact of applying Sender Authentication Package (SAP) to a business unit.

~8 min read · 10 practice questions ·

What the exam expects

  • Explain what an SAP changes for one business unit: branded links and images, authenticated From domain, dedicated IP, Reply Mail Management and a CloudPages domain.
  • Recommend an SAP, a private domain or a dedicated IP from the customer's branding need and monthly volume, including opting out of the SAP's dedicated IP.
  • Size IPs and SSL licences, and apply the rule that one Enterprise can't mix dedicated and shared IPs.
  • Plan a rebrand, extra From domains, custom CloudPages domains, customer-supplied certificates and BIMI without breaking the existing setup.
  • Key terms: Sender Authentication Package (SAP) (the bundle of Account Branding, private domain, dedicated IP, RMM and CloudPages domain); Account Branding (view-as-a-webpage, link and image tracking addresses on your domain); private domain (an authenticated From domain using SPF and DKIM); dedicated IP (an IP that transmits only your account's email).

Key facts

SAP mandatory
Detail
More than 250,000 email messages a month
Account Branding
Detail
Available only with SAP
SAP per business unit
Detail
One for branding; multiple private From domains allowed
Dedicated IP reputation floor
Detail
100,000 or more emails a month per IP
IP capacity
Detail
Up to 2.5 million messages per day per IP
Mixing IP types
Detail
Dedicated and shared can't coexist on one Enterprise
Opting out of the SAP IP
Detail
Forfeits the dedicated IP in the SKU
SSL licences
Detail
SAP 4; each extra CloudPages site 1
SAP licences by edition
Detail
Corporate and Pro 1; Enterprise 5
Customer-supplied certificate
Detail
Secure within 30 days or Salesforce applies one
Rebrand
Detail
New SAP; existing dedicated IP can be kept
BIMI
Detail
Not default; customer string added to a delegated domain
Sources for this section (3)
  • Why can't an account with a single dedicated IP choose an IP in a delivery profile?
  • Why does a sender on shared IPs still need to warm its reputation?
  • Who buys the domains used with an SAP?
  • When should a sender discuss dedicated Message Transfer Agents with its account executive?

The questions are free to read. Answers with their sources and self-grading are included with the pack.

Keep reading with the Marketing Cloud Engagement Consultant pack

  • Core concepts
  • Exam traps
  • Worked scenario

The pack includes:

  • All 20 lessons of the Marketing Cloud Engagement Consultant guide, with reading progress
  • Interactive decision walks and step-by-step sequence steppers
  • Practice exams purchase adds inline bank questions and topic practice (10 questions for this lesson)
  • An official source cited for every claim
  • An AI tutor that answers from the guide
  • Choose guide-only, practice-only, or save $4 with both

Practice for the Marketing Cloud Engagement Consultant exam