Case Study:1, Fabrikam inc.
Overview
Fabrikam. Inc. is an international manufacturing company that has 5,000 employees. The company has sales, marketing research and human resources departments.
Fabrikam has two main offices and three branch offices. The main offices are located in New York and London. The branch offices are located in Seattle, Montreal, and Paris.
The offices connect to each other by using a WAN link. Each office connects directly to the Internet. The WAN connections from the main offices to the branch offices are reliable.
Existing Environment
Exchange Environment
The Exchange Server organization contains servers that have either Exchange Server 2010 or Exchange Server 2013 installed. Each main office contains two Exchange Server 2013 servers. Each branch office contains one Exchange Server 2010 server.
MX records are configured to deliver email to the offices in New York and London. Email is delivered to the London office only if the New York office is unavailable. Each office is configured to use a separate namespace for client access. The New York office is configured to use a namespace of mail.fabrikam.com.
The servers in the New York and London offices are members of a database availability group (DAG). Each mailbox database in the New York and London offices has three copies.
The technical support staff in the branch offices have administrative access to the existing Exchange servers and are assigned Organization Management permissions.
Users from the sales department frequently send email messages that contain the Social Security number of customers in the United States.
Problem Statements
Fabrikam identifies the following issues on the network:
• Users in the Paris office report that when launching Microsoft Outlook, they receive a security alert indicating a certificate name mismatch. The security alert is not generated when they connect to Outlook Web Access. Users from the other offices do not report receiving the security alert.
• Network administrators report that the mailbox databases in the New York office sometimes activate on the Exchange servers in the London office, resulting in poor performance for the New York office users.
Planned Changes
Fabrikam plans to implement the following changes to the network:
• Upgrade the organization to Exchange Server 2016 during the next six months.
• Enable online document viewing and editing from Outlook on the web.
High Availability Requirements
Fabrikam identifies the following high-availability requirements for the planned deployment:
• Mailbox databases that contain mailboxes for the New York office users must only be activated on the servers in the London office manually.
• All client access connections to the London and New York offices must use load-balanced namespaces. The load balancing mechanism must perform health checks.
Security and compliance requirements
Fabrikam identifies the following security and compliance requirements:
• After the planned upgrade, the maximum mailbox size must be 5 GB.
• Administrators from the branch offices must be able to view the mailbox properties and reset the passwords of the users, but must be prevented from changing the mailbox database configurations.
• Users who are involved in legal disputes with customers must be prevented from permanently deleting email messages pertaining to the dispute. The users must be able to delete all other messages permanently.
• If a user enters a Social Security number in an email message addressed to an external recipient, the user must receive a notification before sending the message If the user sends the message. The message must not be delivered. A compliance officer must be notified of the violation.
Connectivity requirements
Fabrikam identifies the following connectivity requirements:
• Connections for inbound and outbound email must be initiated and terminated from an Edge Transport server in the perimeter network.
• All external client connections from the branch office users must be proxied from the New York office to the branch offices.
• The number of namespaces used for client access must be minimized.
You need to recommend changes to the existing environment to meet the high-availability requirements for the mailbox databases.
What should you recommend?
- A . Run TheSet-MailBoxDatabasecmdlet.
- B . Run theSet-DatabaseAvailabilityGroupcmdlet
- C . Run theSet-MailBoxServer cmdlet.
- D . Run theSet-MailBoxDatabaseCopycmdlet.
C
Explanation:
Scenario:
Mailbox databases that contain mailboxes for the New York office users must only be activated on the servers in the London office manually.
We can use the Set-MailBoxServer cmdlet with the DatabaseCopyAutoActivationPolicy parameter. References:
https://docs.microsoft.com/en-us/powershell/module/exchange/mailbox-databases-
and-servers/set-mailboxserver?view=exchange-ps
You begin to implement the Exchange Server 2016 servers and plan to decommission the Exchange Server 2013 servers during the next six months.
You need to recommend which actions must be performed to support the planned changes for document collaboration.
You install Microsoft Office Online Server on a new server.
Which two cmdlets should you recommend running next? Each correct answer presents part of the solution.
- A . New-OfficeWebAppsFarm
- B . Set-PartnerApplication
- C . Set-MailboxServer
- D . New-OfficeWebAppsHost
- E . Set-OrganizationConfig
You need to recommend a solution for the users involved in the legal disputes.
What should you include in the recommendation?
- A . a journal rule
- B . an Outlook protection rule
- C . an in-place Hold
- D . a Litigation Hold
C
Explanation:
References: https://technet.microsoft.com/en-us/library/ff637980(v=exchg.160).aspx
You deploy Layer 7 load balancers to the New York and London offices.
You are planning the namespace configuration that will be used once you complete the planned upgrade to Exchange Server 2016.
You need to recommend a solution to meet the connectivity requirements for the namespaces.
What should you recommend?
- A . On the New York office servers, change the internal URLs to mail.fabrikam.com.
- B . On all of the branch office servers, change the external URLs to Snull.
- C . On all of the branch office servers, change the external URLs to mail.fabnkam.com.
- D . On the New York office servers, change the internal URLs to Snull.
C
Explanation:
Scenario:
Fabrikam connectivity requirements include: The number of namespaces used for
client access must be minimized.
Each office is configured to use a separate namespace for client access. The New York office is configured to use a namespace of mail.fabrikam.com.
You need to recommend changes to the messaging infrastructure. The changes must meet the connectivity requirements after the planned upgrade.
Which two actions should you recommend? Each correct answer presents part of the solution.
- A . From the Mailbox servers, import the Edge Subscription file.
- B . On the Edge Transport Servers, start Edge Synchronization.
- C . On the Edge Transport servers, import the Edge Subscription file.
- D . On the Edge Transport servers, create an Edge Subscription file.
- E . On the Mailbox servers, restart the Microsoft Exchange Transport service.
You need to recommend changes to the existing environment to meet the high-
availability requirements for the mailbox databases.
What should you recommend?
- A . Run the Suspend-MailboxDatabaseCopy cmdlet
- B . Run the Update-MailboxDatabaseCopy cmdlet.
- C . Deploy a file share witness to a branch office.
- D . Modify the cluster resource properties.
A
Explanation:
Scenario:
Mailbox databases that contain mailboxes for the New York office users must only be activated on the servers in the London office manually.
We can use the Suspend-MailboxDatabaseCopy cmdlet with the -ActivationOnly parameter.
HOTSPOT
You need to configure a data loss prevention (DLP) policy to meet the compliance and security requirements.
How should you configure the policy rule? To answer, select the appropriate options in the answer area.
HOTSPOT
You need to recommend how many database availability groups (DAGs) and how many namespaces must be added to the site resilience solution to meet the availability requirements.
How many namespaces and DAGs should you recommend adding? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.
Explanation:
Box 1: Number of namespaces: Four
Box 2: Number of Dags: Two Depending on your architecture and infrastructure you have two choices: These choices are tied to the DAG architecture.
• Deploy a unified namespace for the site resilient datacenter pair (unbound model).
• In an unbound model, you have a single DAG deployed across the datacenter pair.
• Deploy a dedicated namespace for each datacenter in the site resilient pair (bound model). In a bound model, multiple namespaces are preferred, two per datacenter (primary and failback namespaces), to prevent clients trying to connect to the datacenter where they may have no connectivity.
As its name implies, in a bound model, users are associated (or bound) to a specific datacenter. In other words, there is preference to have the users operate out of one datacenter during normal operations and only have the users operate out of the second datacenter during failure events. There is also a possibility that users do not have equal connectivity to both datacenters. Typically, in a bound model, there are two DAGs deployed in the datacenter pair. Each DAG contains a set of mailbox databases for a particular datacenter; by controlling where the databases are mounted, you control connectivity.
From scenario:
The servers in the New York and London offices are members of a database availability group (DAG).
Fabrikam identifies the following high-availability requirements for the planned deployment: Mailbox databases that contain mailboxes for the New York office users must only be activated on the servers in the London office manually. All client access connections to the London and New York offices must use load-balanced namespaces. The load balancing mechanism must perform health checks.
References: https://blogs.technet.microsoft.com/exchange/2015/10/06/namespace-planning-in-exchange2016/
You plan to create a new mailbox for the auditing department.
You need to recommend which task must be performed immediately after the mailbox is created. The solution must meet the compliance requirements.
What should you recommend?
- A . Enable an archive for the new mailbox.
- B . Place the new mailbox on Litigation Hold.
- C . Run the Set-Mailbox cmdlet.
- D . Run the Start-ManagedFolderAssistant cmdlet.
B
Explanation:
In Exchange 2016, you can create mobile device mailbox policies to apply a common set of policies or security settings to a collection of users. After you deploy Exchange ActiveSync in your Exchange 2016 organization, you can create new mobile device mailbox policies or modify existing policies.
Use the Set-MobileDeviceMailboxPolicy cmdlet to modify mobile device mailbox policies.
Incorrect Answers:
D: Use the Set-ActiveSyncOrganizationSettings cmdlet to set the MicrosoftExchange ActiveSync settings for the organization.
References: https://technet.microsoft.com/en-us/library/bb123783(v=exchg.160).aspx
HOTSPOT
You need to recommend a solution to resolve the security alert issue encountered by the Paris office users after the planned upgraded.
Which command should you recommend? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point
Case Study: 2, Relecloud
Directory Environment
The network contains a single Active Directory forest named relecloud.com. The forest contains a single domain and a single Active Directory site.
All servers run Windows Server 2012 R2 and are members of the domain. All client computers run Windows 10 and are members of the domain.
The Active Directory forest is prepared for Exchange Server 2016.
Exchange Environment
Relecloud has an Exchange Server 2013 Service Pack 1 (SP1) organization.
The organization contains six servers.
The servers are configured as shown in the following table.
The organization has the following configurations:
• EX1, EX2, and EX3 are members of a database availability group (DAG) named DAG1.
• Edge Synchronization is configured for the Active Directory site.
• All client computers have Microsoft Outlook 2013 SP1 installed.
• All inbound and outbound mail flow is routed through EdgeEx.
• Antispam transport agents are configured on EdgeEX.
• Active Directory split permissions are enabled.
• Outlook anywhere is enabled.
Developers are Relecloud develop applications that send email notifications. These notifications are sent by using an SMTP client.
Planned Changes
Relecloud plans to upgrade all of the Mailbox and Client Access servers to Exchange Server 2016.
The servers will host all of the mailboxes in the organization. The SMTP clients used by the development department users will use the new email servers to relay email messages
Connectivity Requirements
Relecloud identifies the following connectivity requirements:
• The default connection method for the Outlook clients must be MAPI over HTTP.
• All Exchange ActiveSync users must be prevented from sending email messages that are larger than 1 MB.
Compliance Requirements
Relecloud identifies the following connectivity requirements:
• Prevent all users in the organization from deleting email messages that contain the word RelecloudFutures.
• Log all of the details that relate to the creation of new mailboxes.
Availability Requirements
Relecloud identifies the following availability requirements:
• Implement a new Exchange Server 2016 DAG.
• Maintain multiple copies of the mailbox information during the upgrade process to Exchange Server 2016.
You need to ensure that members of a group named Relecloudadmins can create user accounts and mailboxes for new employees after the planned upgrade.
What should you do first?
- A . Run theNew-ManagementRolecmdlet.
- B . Run theNew-ManagementRoleAssignmentcmc] e:
- C . Run setup.exe and specify the/PrepareDoma/nparameter.
- D . Run setup.exe and specify the/prepareADparameter.
B
Explanation:
References:
https://technet.microsoft.com/en-us/library/dd335193(v=exchg.160).aspx
DRAG DROP
You need to prevent all of the users from deleting certain email messages after the planned upgrade. The solution must meet the compliance requirements.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
After deploying new servers, you configure the development applications to send email notifications by using a new server that runs Exchange Server 2016.
You need to reduce the likelihood that the email messages will be identified incorrectly as spam.
What should you do?
- A . On the new server run, theSet-TransportConfigcmdlet and specify the-/nterna/SMTPServersparameter.
- B . Create a new internal relay accepted domain.
- C . Upgrade EdgeEX to Exchange Server 2016.
- D . On the new server run, run theSet-TransportServercmdlet and specify Xhe-AntiSpamAgentsEnabledar6et
A
Explanation:
References:
www.techieshelp.com/exchange-2013-enable-anti-
spam/">http://www.techieshelp.com/exchange-2013-enable-anti-spam/
You are planning the deployment of the Exchange servers.
You need to recommend which configurations must be performed after the installation of Exchange Server 2016 to ensure that the users can access the mailboxes without receiving error messages.
Which two actions should you recommend? Each correct answer presents part of the solution.
- A . Add the new server to the Exchange Servers group.
- B . Create a Send Connector.
- C . Import the certificate from EX3 and assign the certificate.
- D . Configure the virtual directory URLs.
- E . Create a Receive Connector.
C, D
Explanation:
References: https://technet.microsoft.com/EN-US/librarv/mt634322(v=exchg.160).aspx
You need to meet the connectivity requirement for the Exchange ActiveSync clients after the planned upgrade.
What should you do?
- A . Modify the EdgeTransport.exe.config.file.
- B . Run theSet-TransportConfigcmdlet.
- C . Run theSet-ActiveSyncMailboxPolicycmdlet
- D . Modify the Web.config file.
D
Explanation:
References: https://technet.microsoft.com/en-us/library/hh529949(v=exchg.150).aspx
DRAG DROP
You need to recommend which actions must be performed to upgrade the organization to Exchange Server 2016. The solution must meet the availability requirements.
Which five actions should you recommend be performed in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Explanation:
https://wwwhttps://ww.certkingdom.dumpsschool.co/.com
Questions & Answers PDF P-18
HOTSPOT
You need to meet the compliance requirements for the creation of new mailboxes after the planned upgrade.
What command should you run? To answer, select the appropriate options in the answer area.
You need to ensure that members of a group named Relecloudadmins can create user accounts and mailboxes for new employees by using Exchange Admin Center (EAC) after the planned upgrade.
What should you do first?
- A . Run the New-ManagementRole cmdlet.
- B . Run the New-ManagementRoleAssignment cmdlet.
- C . Run setup.exe and specify the /PrepareDomain parameter.
- D . Run setup.exe and specify the /prepareAD parameter.
B
Explanation:
References:
https://technet.microsoft.com/en-us/library/dd335193(v=exchg.160).aspx
Case Study: 3, Contoso Ltd,
Overview
General Overview
Contoso. Ltd. is an international company that has 3,000 employees. The company has sales, marketing, research, and human resource departments.
Physical Locations
Contoso has two main offices. The offices are located in New York and Chicago.
Each office has a data center.
The New York office uses a network subnet of 10.1.0.0/16. The Chicago office uses a network subnet of 10.128.0.0/16.
The offices connect to each other by using a WAN link. Each office connects directly to the Internet.
Existing Environment
Active Directory
The network contains an Active Directory forest named contoso.com. The forest contains a single domain. All domain controllers run Windows Server 2012 R2. The forest functional level is Windows Server 2012 R2.
The forest contains six domain controllers configured as shown in the following table.
The forest is configured as a single Active Directory site.
Active Directory administrators manage the Active Directory schema. Exchange Server administrators do not have access to modify the schema.
Contoso has deployed Active Directory Rights Management Services (AD RMS).
Current Business Model
Contoso partners with a company names Fabrikam. Inc. on manufacturing initiatives. The partnership between Contoso and Fabrikam requires that both companies share confidential information frequently.
Requirements
Business Goals
Contoso plans to install Exchange Server 2016 to provide messaging services for its users.
It must be as easy as possible for the users at Contoso to share free/busy information with the users at Fabrikam.
As much as possible. Contoso plans to minimize the costs associated with purchasing hardware and software.
Planned Changes
Contoso plans to implement the following changes before installing Exchange Server 2016:
• Install hardware Network Load Balancing (NLB) in the New York and Chicago offices.
• Implement Microsoft Office Online Servers in the New York and Chicago offices.
• Provide Contoso users with company-approved tablets.
Planned Messaging Infrastructure
You plan to create an Exchange Server 2016 organization named Contoso. You plan to deploy seven servers that will have Exchange Server 2016 installed.
The servers will be configured as shown in the following table.
All of the servers will be members of a database availability group (DAG) named DAG01.
Client Access Requirements
Contoso identifies the following client access requirements for the planned deployment:
• Users must be able to configure their tablet to synchronize email by using Autodiscover.
• Users must be able to access the Exchange Server organization by using the following names:
o Mail.contoso.com
o Autodiscover.contoso.com
• Users must be able to access Outlook on the web internally and externally from their tablet.
• Users must be able to access Office Online Server by using the URL of office-online.contoso.com.
Security Requirements
Contoso identifies the following security requirements for the planned deployment:
• Exchange Server mailbox databases must be encrypted while at rest.
• Users must be prevented from using Outlook on the web while they are offline.
• Contoso users must be able to share Calendar details with approved external domains only.
• Email messages sent to the users in the fabrikam.com SMTP domain must be encrypted automatically.
• Whenever possible, client computers must be directed to the same Exchange server for log collection.
• Users must be able to access their mailbox by using Exchange ActiveSync on the company-approved tablets only.
• Email messages sent from the users in the human resources department of Contoso must be protected by using AD RMS. regardless of the mail client.
Availability Requirements
Contoso identifies the following high-availability requirements for the planned deployment:
• Servers must be able to complete a restart without administrative intervention.
• The network load balancer must be able to probe the health of each workload.
• If a data center fails, the databases in the other data center must be activated automatically.
• Redundant copies of all email messages must exist in the transport pipeline before and after delivery.
• Email messages must be made highly available by the Exchange Server organization before and after delivery.
• If you manually mount the databases following the data center failure, the databases in the failed site must be prevented from mounting automatically.
You need to recommend a solution that meets the security requirements for mobile devices.
Which two objects should you include in the recommendation? Each correct answer presents part of the solution.
- A . a device access rule
- B . a mobile device mailbox policy
- C . a data loss prevention (DLP) policy
- D . an Outlook Web App policy
A, D
Explanation:
References:
https://technet.microsoft.com/en-us/library/dn792010.aspx
https://technet.microsoft.com/en-us/library/dd297989(v=exchg.160).aspx
You run the Get-SendConnector cmdlet and you receive the following output.
You need to recommend which actions are required to secure email connectivity between the contoso.com SMTP domain and the fabrikam.com SMTP domain.
Which two actions should you recommend? Each correct answer presents part of the solution.
- A . Import a server certificate that has a subject name ofex01.contoso.com and a subject alternate name ofex02.contoso.com.
- B . Create an Outlook protection rule.
- C . Import a server certificate that has a subject name of smtp.contoso.com.
- D . Configure the TLSSendDomainSecureListparameXer for the organization.
- E . Modify the ConnecforTypeparameter for the Send connector.
C, D
Explanation:
References:
https://technet.microsoft.com/en-gb/library/bb123543(v=exchg.141).aspx
You need to recommend a solution that meets the security requirements for the mailbox databases.
What should you include in the recommendation?
- A . Resilient File System (ReFS)
- B . Transparent Data Encryption (TDE)
- C . BitLocker Drive Encryption (BitLocker)
- D . Encrypting Files System (EFS)
HOTSPOT
You need to instruct the Active Directory administrators how to prepare the Active Directory environment to support the planned Exchange Server 2016 deployment.
What command should you instruct administrators to run? To answer, select the appropriate options in the answer area.
DRAG DROP
You need to configure the Exchange Server organization to support the security requirements for Calendar sharing.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
You need to recommend a solution that meets the security requirements for the tablets.
Which two objects should you include in the recommendation? Each correct answer presents part of the solution.
- A . a mobile device mailbox policy
- B . an Outlook Web App policy
- C . a data loss prevention (DLP) policy
- D . a device access rule
B, D
Explanation:
Scenario: Users must be able to access Outlook on the web internally and externally from their tablet.
Users must be able to configure their tablet to synchronize email by using Autodiscover.
Users must be able to access their mailbox by using Exchange ActiveSync on the company-approved tablets only
HOTSPOT.
Hotspot Question
You need to configure DAG01 to meet the availability requirements.
What command should you run? To answer, select the appropriate options in the answer area.
You plan to configure the Exchange organization for site failovers.
You need to recommend how many certificates must be deployed to meet the availability requirements and the security requirements.
What is the minimum number of certificates you should recommend deploying?
- A . One
- B . Two
- C . Three
- D . Four
C
Explanation:
Some services, such as Outlook Anywhere and Exchange ActiveSync, require certificates to be configured on your Exchange 2016 server.
From scenario: Security Requirements Contoso identifies the following security requirements for the planned deployment:
• Users must be able to access their mailbox by using Exchange ActiveSync on the company-approved
tablets only.
• Email messages sent from the users in the human resources department of Contoso must be protected by using AD RMS, regardless of the mail client.
• Email messages sent to the users in the fabrikam.com SMTP domain must be encrypted automatically.
And others
• Exchange Server mailbox databases must be encrypted while at rest.
• Users must be prevented from using Outlook on the web while they are offline.
• Contoso users must be able to share Calendar details with approved external domains only.
• Whenever possible, client computers must be directed to the same Exchange server for log collection.
References: https://technet.microsoft.com/en-us/library/mt441782(v=exchg.150).aspx
Case Study: 4, Litware
Case study
Exchange Server
Litware has an Exchange Server 2016 organization that uses the namespaces of mail.litware.com and autodiscover.litware.com.
The organization contains the servers configured as shown in the following table.
All Internet email is routed through HOU-EX1.
Requirements
Business Goals
Litware has security concerns about the data and messaging content of the research and development department. Preventing information leaks is a priority. All users must be able to access their corporate email from any device.
Litware plans to minimize the costs associated with changing the Exchange Server environment.
Planned Changes
Litware plans to implement a site resilience solution ensuring that outbound email messages can be delivered if one of the sites fail. The site resilience solution must allow all users to access their mailbox if a server fails in each site. Availability Requirements
Litware identifies the following availability requirements:
Load balancing must support the following functionalities:
• Load balancing must support the following functionalities:
• Provide SSL termination
• Remove failed Mailbox servers from the server pool.
• Data collected by Managed Availability from Outlook on the web must be used.
• Target server health must be configured as per-protocol so that only the affected client protocol is directed to another server if a server fails.
• The site resilience solution must follow the bound namespace model.
Security Requirements
Litware identifies the following security requirements:
• Users in the research and development department must be able to encrypt documents sent to external users. The encrypted email messages must never be forwarded by the external recipients.
• Only specific research and development department users must be able to access confidential internal email regarding the high-security government contracts.
• All certificates deployed to the Exchange organization must be issued by a trusted third-party certification authority (CA).
• The principle of least privilege must be applied to all users and permissions.
Compliance Requirements
Litware identifies the following compliance requirements:
• Any new mailbox created for the auditing department must have a retention policy named Audit immediately applied manually after the mailbox is created.
• Each week, a team of regulation auditors must review the email messages sent and received by all the research and development department users.
• The regulation auditors must be able to review the email messages of mailboxes placed on Litigation Hold.
• The regulation auditors must be able to gain quick access to the email messages.
HOTSPOT
You need to assign user roles to two administrative users to meet the following requirements:
• A user named AdminUser1 must be able to reset user account passwords.
• A user named AdminUser2 must be able to create retention policies and message classifications.
The solution must meet the security requirements.
To which role should you assign each user? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.
You plan to create a new mailbox for the auditing department.
You need to recommend which task must be performed immediately after the mailbox is created. The solution must meet the compliance requirements.
What should you recommend?
- A . Enable an archive for the new mailbox.
- B . Place the new mailbox on Litigation Hold.
- C . Run the Set-Mailbox cmdlet.
- D . Run the Start-ManagedFolderAssistant cmdlet.
C
Explanation:
“Any new mailbox created for the auditing department must have a retention policy named Audit immediately applied manually after the mailbox is created.” We need to run the Set-Mailbox cmdlet to apply the retention policy.
You implement the load balancing solution.
You need to configure the health probes to meet the availability requirements.
Which URL should you configure for the probe?
- A . https://mail.litware.com/owa/probe.htm
- B . https://mail.litware.com/owa/healthcheck.htm
- C . http://litware.com/owa/healthcheck.htm
- D . http://litware/owa/probe.htm
You need to recommend a solution that meets the security requirements for outbound email delivery.
What should you recommend?
- A . Microsoft Azure Information Protection
- B . data loss prevention (DLP) policies
- C . Outlook protection rules
- D . Active Directory Rights Management Services (AD RMS)
You plan to configure the Exchange organization for site failovers.
You need to recommend how many certificates must be deployed to meet the availability requirements and the security requirements.
What is the minimum number of certificates you should recommend deploying?
- A . one
- B . two
- C . three
- D . four
HOTSPOT
You need to build a command to meet the compliance requirements for the regulation auditors.
How should you complete the command? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.
You need to recommend changes to the existing environment to meet the high-availability requirements for the mailbox databases.
What should you recommend?
- A . Run the Update-MailboxDatabaseCopy cmdlet.
- B . Deploy a file share witness in Azure.
- C . Run the Set-MailboxServer cmdlet.
- D . Deploy a file share witness to a branch office.
You need to recommend a load balancing solution that meets the availability requirements.
Which load balancing solution should you recommend?
- A . a Layer-7 load balancer with a single namespace and without session affinity
- B . a Network Load Balancing (NLB) cluster
- C . DNS round robin
- D . a Layer-4 load balancer with multiple namespaces and without session affinity
A
Explanation:
From Scenario:
Contoso identifies the following high-availability requirements for the planned deployment: The network load balancer must be able to probe the health of each workload.
Load balancers that work on the Layer 7 of OSI model are intelligent. Layer 7 load balancer is aware of the type of traffic passing through it. This type of load balancer can inspect the content of the traffic between the clients and the Exchange server. From this inspection, it gets that results and uses this information to make its forwarding decisions. For example, it can route traffic based on the virtual directory to which a client is trying to connect, such as /owa, /ecp or /mapi and it can use a different routing logic, depending on the URL the client is connecting to. When using a Layer 7 load balancer, you can also leverage the capabilities of Exchange Server 2016 Managed Availability feature. This built-in feature of Exchange monitors the critical components and services of Exchange server and based on results it can take actions.
Note: Layer 7 load balancer can use this to detect functionality of critical services, and based on that information decide if it will forward client connections to that node. If the load balancer health check receives a 200 status response from health check web page, then the service or protocol is up and running. If the load balancer receives a 403 status code, then it means that Managed Availability has marked that protocol instance down on the Mailbox server.
Although it might look that load balancer actually performs a simple health check against the server nodes in the pool, health check web page provides an information about workload’s health by taking into account multiple internal health check probes performed by Managed Availability.
Incorrect Answers:
D: Load balancers that work on Layer 4 are not aware of the actual traffic content being load balanced.
References: http://dizdarevic.ba/ddamirblog/?p=187
Case Study: 5, Mix Questions
DRAG DROP
You have an Exchange Server 2016 organization. The organization contains two Mailbox servers. You have a database that is replicated to both servers. The database contains 500 mailboxes. You add new volumes to the Mailbox servers.
You need to move all of the mailbox data to the new volumes.
The solution must meet the following requirements:
• Ensure that multiple copies of the mailbox data are available at all times.
• Minimize downtime for the mailbox users.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
HOTSPOT
You have an exchange server 2016 organization. The organization contains two servers named EX01 and EX02. Both servers are members of a database availability group (DAG) named DAG01. DAG01 contains two mailbox databases named DB01 and DB02. DB01 and DB02 are replicated to all of the members of DAG01.
You run the Get-MailboxDatabaseCopyStatus cmdlet and you receive the following output.
Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the output.
You have an Exchange Server 2016 organization. The organization contains 10 mailbox databases. You have a mailbox database named DB4 on a disk that has only 10 percent free disk space. You need to prevent automatic mailbox distribution from selecting DB4 as a target.
Which cmdlet should you use?
- A . Set-MailBoxDatabase
- B . Set-Mai IboxServer
- C . Set-SiteMailboxProvisioningPolicy
- D . Set-DatabaseAvailabilityGroup
A
Explanation:
References:
https://technet.microsoft.com/en-gb/library/ff477621 (v=exchg.150).aspx#Exclude
Your network contains a single Active Directory forest. The forest contains two sites named Site1 and Site2.
You have an Exchange Server 2016 organization. The organization contains two servers in each site. You have a database availability group (DAG) that spans both sites. The file share witness is in Site1.
If a power failure occurs at Site1, you plan to mount the databases in Site2.
When the power is restored in Site1, you need to prevent the databases from
mounting in Site1.
What should you do?
- A . Disable AutoReseed for the DAG.
- B . Implement an alternate file share witness.
- C . Configure Datacenter Activation Coordination (DAC) mode.
- D . Force a rediscovery of the network when the power is restored.
C
Explanation:
References: https://technet.microsoft.com/en-us/library/dd979790(v=exchg.150).aspx
HOTSPOT
You have an Exchange Server 2016 organization.
You have a mailbox database named PF_DB1 that contains a public folder mailbox named PF1. PF1 contains a public folder named Marketing. Three weeks ago, a user deleted the Marketing folder.
You restore the database files from the last full backup to a recovery database named R_DB1.
You need to recover Marketing folder.
What command should you run? To answer, select appropriate options in the answer area.
You have an exchange server 2016 organization. The organization contains a Mailbox server named EX01. EX01 contains a mailbox database named DB01.
The volume that contains DB01 fails.
You need to perform a dial-tone recovery of the database.
What should you create first?
- A . a new Recovery Storage Group
- B . a new mailbox database
- C . a mailbox move request
- D . a mailbox restore request
- E . a lagged database copy
You have three Hyper-V hosts that each have 20 processor cores and 64 GB of
RAM.
Nine virtual machines are deployed to the hosts as shown in the following table.
You plan to deploy a two-node Exchange Server 2016 database availability group (DAG) by using the virtual machines. Each node will have 12 processor cores and 24 GB of memory.
You are evaluating whether you can use the existing servers for the deployment or whether you must purchase additional servers.
You need to recommend where to place the Exchange servers. The solution must minimize costs.
What is the best recommendation to achieve the goal? More than one answer choice may achieve the goal. Select the BEST answer.
- A . One Exchange server on Host1 and one Exchange server on a new Hyper-V host.
- B . One Exchange server on Host1 and one Exchange server on Host3.
- C . Both Exchange servers on Host1.
- D . One Exchange server on Host1 and one Exchange server on Host2.
- E . One Exchange server on Host2 and one Exchange server on Host3.
You have an Exchange Server 2016 organization. The organization contains five
Mailbox servers. The servers are members of a database availability group (DAG).
All of the databases in the DAG are replicated to all of the members.
You plan to perform scheduled maintenance on a Mailbox server named MBX3 that will place the server offline for up to an hour.
You need to ensure that any active databases on MBX3 are activated on other DAG members before performing the maintenance.
Which cmdlet should you use?
- A . Set-MailboxDatabaseCopy
- B . Stop-DatabaseAvailabilityGroup
- C . Resume-MailboxDatabaseCopy
- D . Set-MailboxServer
You have an Exchange Server 2016 organization. The organization contains a database availability group (DAG). You need to identify the number of transaction logs that are in replay queue.
Which cmdlet should you use?
- A . Test-ServiceHealth
- B . Test-ReplicationHealth
- C . Get-DatabaseAvailabilityGroup
- D . Get-MailboxDatabaseCopyStatus
D
Explanation:
References: https://technet.microsoft.com/en-us/library/bb691314(v=exchg.160).aspx?f=255&MSPPError=-2147217396
Your company has a data center. The data center contains a server that has Exchange Server 2016 and the Mailbox server role installed. Outlook anywhere clients connect to the Mailbox server by using the name outlook.contoso.com.
The company plans to open a second data center and to provision a database availability group (DAG) that spans both data centers.
You need to ensure that Outlook Anywhere clients can connect if one of the data centers becomes unavailable.
What should you add to DNS?
- A . one A record
- B . two TXT records
- C . two SRV records
- D . one MX record
A
Explanation:
References: https://technet.microsoft.com/en-gb/library/dd638104(v=exchg.150).aspx?f=255&MSPPError=-2147217396
HOTSPOT
You deploy a server named ex01.contoso.com that has Exchange Server 2016 installed.
You need to ensure that when users connect to the URL of http://ex01.contoso.com. they access Outlook on the web over a secure connection.
How should you configure the Default Web Site? To answer, select appropriate options in the selected area.
Your company has two offices. The offices are located in San Francisco and Los Angeles. Each office contains a data center. Each data center has a local connection to the Internet.
You deploy an Exchange Server 2016 organization named Contoso and install three servers in each data center.
All of the servers are members of a single database availability group (DAG). Each data center hosts 2,000 mailboxes that replicate to the other data center.
You create four records in DNS.
The records are configured as shown in the following table.
You need to recommend a client access solution for the organization to meet the following requirements:
• When connecting from the Internet, all users must connect to the same namespace for Outlook on the Web.
• If a connection to the Internet fails at one data center, all users must be able to access their mailbox from the Internet.
• When connecting from the Internet, all user connections to Exchange ActiveSync must be balanced equally across both data centers.
What is the best recommendation to achieve the goal? More than one answer choice may achieve the goal. Select the BEST answer.
- A . in the San Francisco office, configure the internal URLs of the servers to use the internal URLofsfmail.contoso.com. In the Los Angeles office, configure
- B . in the San Francisco office, configure the external URLs of the servers to use the internal URLofsfmail.contoso.com. In the Los Angeles office, configure
- C . Deploy a hardware-based load balancer to each office and configure all of the internal URLs to use mail.contoso.com.
- D . Deploy a hardware-based load balancer to each office and configure all of the external URLs to use mail.contoso.com.
How is the IBM Content Template Catalog delivered for installation?
- A . as an EXE file
- B . as a ZIP file of XML files
- C . as a Web Appli cati on Archive fi le
- D . as a Portal Application Archive file
D
Explanation:
References: https://greenhouse.lotus.com/plugins/plugincatalog.nsf/ass
You have an Exchange Server 2016 organization.
You need to ensure that users in each department download an Offline Address Book (OAB) that only contains the users in their department. The solution must ensure that all of the users can continue to see all the other users in the organization.
Which three actions should you perform? Each correct answer presents part of the solution.
- A . Create an OAB for each department
- B . Modify the properties for each user mailbox.
- C . Create an address book policy (ABP) for each department.
- D . Create an address list for each department.
- E . Modify the properties of the default OAB.
- F . Create an email address policy for each department.
HOTSPOT
You are designing an Exchange Server 2016 organization. The organization will use a single namespace of mail.contoso.com for all client access protocols. You plan to use load balancers.
You identify the following requirements for the load balancing solution:
• The Edge Transport server log files must contain the original IP address of the SMTP hosts.
• Clients must be able to connect only when they use the approved hostnames and the approved virtual directories.
You need to identify which type of load balancer meets each requirement.
What should you identify? To answer, select the appropriate options in the answer area.
HOTSPOT
You have a hybrid Exchange Server 2016 organization.
Users use Outlook on the web. All mailboxes currently reside on-premises.
You have an internal public key infrastructure (PKI) that uses a certification authority (CA) named CA1. Certificates are issued to users to sign and encrypted email messages.
You move a mailbox to Exchange Online and you discover that the mailbox fails to exchange signed or encrypted email messages from the on-premises mailbox users. You need to ensure that all of the mailboxes that were moved to Exchange Online can send encrypted email messages to the on-premises mailboxes. The mailboxes must also be able to receive encrypted email messages from the on-premises
mailboxes.
You export the required certificates to a file named Export.sst
What command should you run next? To answer, select appropriate options in the answer area.
Your company has an Exchange Server 2016 organization named contoso.com.
You need to recommend a solution that meets following requirements:
• A user named Userl must be able to send email messages by using an alias ofsales@contoso.comin the From field.
• Recipients of the messages must be prevented from the identifying the actual sender of the message.
• Userl and a user named User2 must each receive a copy of replies tosales@contoso.com
What should you recommend?
- A . Create a distribution group named Sales that has an alias of Sales. Add User1 and User2 to the group. Assign the Send As permissions to User1.
- B . Create a shared mailbox named Sales that has an Alias of Sales. Assign the Receive As permission User1 and User2. Assign the Send As permission to User 1
- C . Create a shared mailbox named Sales that has an Alias of Sales. Assign the Receive As permission User1 and User2. Assign the Send on permission to User 1
- D . Create a distribution group named Sales that has an alias of Sales. Add User1 and User2 to the group. Assign the send on Behalf permission to User1.
You have an Exchange Server 2016 organization. The organization contains several servers.
Users in the marketing department often send Information Rights Management (IRM)-protected email messages. The IRM-protected messages are excluded from eDiscovery searches.
You need to configure the Exchange Server Organization to ensure that the contents of the mailboxes of the marketing department users are searched for all messages that contain the word ProjectX. The solution must prevent the email messages from being deleted permanently.
You user account is a member of the required role group.
Which three actions should you perform? Each correct answer present part of the solution.
- A . Run theNew-Mailboxcmdlet
- B . Run theNew-MailboxSearchcmdlet
- C . Run theSet-IRMConfigurationcmdlet
- D . RuntheSearch-Mailboxcmdlet
- E . Export the results from the discovery mailbox to a personal folders (PST) file, and then use MicrosoftOutlook to open the PST file.
- F . Use Outlook on the web to open the discovery mailbox.
B, C, E
Explanation:
References:
https://technet.microsoft.com/en-us/library/dn440164(v=exchg.160).aspx?f=255&MSPPError=-2147217396
https://technet.microsoft.com/en-us/library/dd353189(v=exchg.160).aspx
HOTSPOT
Your company has an Exchange Server 2016 organization.
You plan to allow several users to access the mailboxes of the other group.
You need to ensure that a user named User1 can read and delete the email messages in the mailbox of a user named User2. User1 must add the mailbox of User2 manually to the Microsoft Outlook profile.
What command should you run? To answer, select the appropriate options in the answer area.
You are planning an Exchange Server 2016 organization. The organization will contain a Mailbox server named EX01.
Users will have primary SMTP email addresses in the following domains:
• Contoso.com
• Fabrikam.com
• Cohowinery.com
• Wingtiptoys.com
You need to add a DNS record to provide Autodiscover for each domain.
Which type of record should you create in each zone?
- A . SRV
- B . CERT
- C . MINFO
- D . PTR
DRAG DROP
You need to configure a distribution group named CustomerService that has the following configurations:
• A user named CSManager must be the only user allowed to add members to CustomerService.
• All email messages sent to CustomerService must be approved by CSManager.
• External users must be allowed to send email messages to CustomerService.
You configure CSManager as the group owner.
What should you configure in the Exchange admin center for each requirement? To answer, drag the appropriate configurations to the correct requirements. Each configuration may be used once, more than once, or not at all. You may need to drag the split bar, between panes or scroll to view content.
You have an Exchange Server 2016 organization. The organization contains accepted domains for contoso.com and litwareinc.com. The antimalware engine is enabled on Mailbox servers and uses the default policy. You do not create any custom malware rules. You need to notify internal senders when a malware attachment is detected. The rule must apply only when the recipient domain is contoso.com.
Which two cmdlets should you use? Each correct answer presents part of the solution.
- A . Set-MalwareFilterPolicy
- B . New-MalwareFilterRule
- C . New-MalwareFilterPolicy
- D . Set-MalwareFilterRule
B, C
Explanation:
References:
https://technet.microsoft.com/en-us/library/dn306062(v=exchg.160).aspx?f=255&MSPPError=-2147217396
https://technet.microsoft.com/en-us/library/p15680(v=exchg.160).aspx?f=255&MSPPError=-2147217396
You have an Exchange Server 2016 organization. The organization contains three Mailbox servers.
The servers are configured as shown in the following table
You have distribution group named Group1. Group1 contains three members.
The members are configured as shown in the following table.
You discover that when User1 sends email messages to Group1, all of the messages are delivered to EX02 first.
You need to identify why the email messages sent to Group1 are sent to EX02 instead.
What should you identify?
- A . EX02 is configured as an expansion server.
- B . The arbitration mailbox is hosted on EX02.
- C . Site2 has universal group membership caching enabled.
- D . Site2 is configured as a hub site.
A
Explanation:
References: https://technet.microsoft.com/en-us/library/aa998825(v=exchg.150).aspx
Your network contains an Active Directory forest that has the site topology shown in the diagram.
You have an Exchange Server 2016 organization. The organization contains three servers.
The servers are configured as shown in the following table.
You have the users described as shown in the following table.
You need to ensure that any email messages sent from User1 to User3 are sent to EX02 first, and then delivered to EX03.
What should you configure?
- A . Site 2 as a hub site
- B . EX02 as an expansion server
- C . the Exchange cost for the site link from Site 2 to Site 3
- D . the Exchange cost for the site link from Site 1 to Site 2
A
Explanation:
References: https://technet.microsoft.com/en-us/library/aa998825(v=exchg.150).aspx
HOTSPOT
You have an Exchange Server 2016 organization.
The Active directory sites are configured as shown in the following graphic.
Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
Your company has three offices. The offices are located in New York, London and Sydney. The offices connect to each other by using a WAN link. Each office connects directly to the Internet.
The company has an Exchange Server organization. The organization contains six mailbox servers.
The servers are configured as shown in the following table.
Each office is configured to use a different Send connector to send email messages to the Internet.
You need to ensure that the servers route email messages that have Internet recipients through their respective site only.
What should you modify?
- A . the permissions of each Send connector
- B . the settings of the site links
- C . the cost of each Send connector
- D . the scope of each Send connector
D
Explanation:
References: https://msdn.microsoft.com/en-us/library/aa998662(v=exchg.160).aspx?f=255&MSPPError=-2147217396
HOTSPOT
You have an Exchange Server 2016 organization.
The Active directory sites are configured as shown in the following graphic.
Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic
HOTSPOT
You have an Exchange Server 2016 organization.
All users use Microsoft Outlook 2016.
You need to configure the Exchange Server organization to meet following requirements:
• Users must be prevented from receiving a notification when they attempt to send an email message to distribution groups that contain less than 100 members.
• Users must be notified before they send email messages to an unmonitored mailbox named Service1.
Which cmdlet should you run to meet each requirement? To answer, drag appropriate cmdlets to the correct requirements. Each cmdlet must be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
DRAG DROP
Your company has an Exchange Server 2016 organization. The organization contains three servers and 2,000 mailboxes.
The organization audits all access to user mailboxes.
The company’s security policy has the following requirements:
• Audit the name of each administrator who modifies the Exchange Server organization settings.
• Reduce the amount of audit log information generated by a service account named Service1.
• Create an audit entry when an administrator modifies the permissions of another administrative mailbox.
You need to identify which PowerShell cmdlets must be used to meet the requirements.
Which PowerShell cmdlet should you identify for each requirement? To answer, drag the appropriate cmdlets to the correct requirements. Each cmdlet may be used once, more than once or not at all. You may need to drag the split bar between panes or scroll to view content.
HOTSPOT
You run the Get-DIpPolicy cmdlet and you receive the following output.
Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the output.
HOTSPOT
You have an Exchange Server organization. The organization contains four servers.
The servers configured as shown in the following table.
You plan to upgrade the organization to Exchange Server 2016.
You need to identify which servers have functionalities that can be fully achieved by using Exchange Server 2016.
What should you identify? To answer, select the appropriate options in the answer area.
