Advanced Solutions of Microsoft Exchange Server 2013
Question No: 91 – (Topic 6)
You have an Exchange Server 2013 organization that has a hybrid deployment with Microsoft Office 365. The hybrid deployment use Active Directory Federation Services (AD FS) 3.0.
You need to ensure that only Exchange ActiveSync devices are allowed to access Office 365 services from outside of the organization.
Which two actions should you perform? Each correct answer presents part of the solution.
Create a Mobile Device Mailbox Policy.
Update the Office 365 Identify Platform relying party trust.
Add claims rules to the Active Directory claims provider trust.
Update the Office mobile device policy.
Add an Active Directory Identify Platform relying party trust.
Answer: C Explanation:
C: Step 1: Add claim rules to the Active Directory Claims Provider trust Block all external access to Office 365 except Exchange ActiveSync
The following example allows access to all Office 365 applications, including Exchange Online, from internal clients including Outlook. It blocks access from clients residing outside the corporate network, as indicated by the client IP address, except for Exchange ActiveSync clients such as smart phones. The rule set builds on the default Issuance Authorization rule titled Permit Access to All Users. Use the following steps to add an Issuance Authorization rule to the Office 365 relying party trust using the Claim Rule Wizard: (steps omitted).
B: Step 2: Update the Microsoft Office 365 Identity Platform relying party trust
Reference: Limiting Access to Office 365 Services Based on the Location of the Client https://technet.microsoft.com/en-us/library/hh526961(v=ws.10).aspx
Question No: 92 DRAG DROP – (Topic 6)
You have an Exchange server organization that contains Exchange Server 2010 servers and Exchange Server 2013 servers.
You have a Microsoft Lync Server 2010 environment that is integrated with Exchange Server 2010 to provide Unified Messaging (UM) services. All UM dial plans are SIP secured.
You plan to move the UM services to Exchange Server 2013.
You need to ensure that the Exchange Server 2013 UM services can be integrated with Lync Server 2010.
Which three cmdlets should you run in sequence? To answer, move the appropriate cmdlets from the list of cmdlets to the answer area and arrange them in the correct order.
Target 1: Export-ExchnageCertificate
Target 2: Import-ExchangeCertificate
Target 3: New-UMIPGateway
Export the certificate from Exchange 2010.
You can import and enable the certificate using the following command: Import-ExchangeCertificate
Create UM IP gateway.
The UM IP Gateway is responsible for traffic between the Lync Mediation Server and the UM server.
Question No: 93 HOTSPOT – (Topic 6)
You have an Exchange Server 2013 organization.
You need to create a single transport rule that applies to messages sent from users in the organization to users that are outside of the organization.
Which two options should you use? To answer, select the two appropriate options in the answer area.
Condition name includes:
The sender is located
This condition matches messages that are sent by senders within the specified scope such as Inorganization.
The recipient is located
This condition matches messages that are sent to recipients within the specified scope.
Note: Property values include:
FromUserScope: Single value of InOrganization or NotInOrganization Single value of InOrganization or NotInOrganization
One of the following values: InOrganization, NotInOrganization, ExternalPartner, ExternalNonPartner
ToUserScope specifies the scope of the recipients. The InOrganization and NotInOrganization values are evaluated similar to the FromUserScope property, but in the context of the recipient.
Question No: 94 – (Topic 6)
You are a network administrator for a company named Contoso, Ltd.
You install the Active Directory Rights Management Services server role on a server. The Active Directory Rights Management Services (AD RMS) server uses an internal certification authority (CA) for all certificates.
You plan to provide users with the ability to use AD RMS to protect all of the email messages sent to a partner company named A. Datum Corporation.
ADatum does not have AD RMS deployed.
You need to identify which components from the Contoso network must be accessible to A. Datum to ensure that the users at A. Datum can open protected messages.
Which two components should you identify? (Each correct answer presents part of the solution. Choose two.)
The Active Directory domain controllers
The Client Access servers
The certificate revocation list (CRL)
The Mailbox servers
The AD RMS cluster
Answer: A,C Explanation:
A: The users in Adatum will need an account on a domain controller in Contoso to open a protected message.
C. The certificate used to secure the message will need to be checked against a certificate revocation list (CRL).
Question No: 95 HOTSPOT – (Topic 6)
You have an Exchange Server 2013 organization that contains three servers named EX1, EX2, and EX3 in a single Active Directory site. All of the servers are members of a database availability group (DAG) named DAG1. Each server has a copy of all the mailbox databases.
You discover that the copies of a database named DB1 are in a FailedAndSuspended state due to disk failures on EX2 and EX3.
You replace the disks.
You need to start seeding DB1 on EX2 from EX1. The solution must ensure that DB1 can be seeded on EX3 simultaneously.
What command should you run? To answer, select the appropriate options in the answer area.
Use the Update-MailboxDatabaseCopy cmdlet to seed or reseed a mailbox database copy. We reseed the database with a new copy by issuing the following command.
[PS] C:\gt;Update-MailboxDatabaseCopy -Identity quot;DB1\EX2quot;
For long reseeds where you do not want to leave your Exchange Management Shell open, or when scripting a reseed and you don’t want the script to have to wait for the reseed to complete, you can use the -BeginSeed parameter.
[PS] C:\gt;Update-MailboxDatabaseCopy quot;-Identity quot;DB1\EX2quot; -BeginSeed
The BeginSeed parameter is useful for scripting reseeds, because with this parameter, the task asynchronously starts the seeding operation and then exits the cmdlet.
* The MaximumSeedsInParallel parameter is used with the Server parameter to specify the maximum number of parallel seeding operations that should occur across the specified server during a full server reseed operation. The default value is 10.
Question No: 96 – (Topic 6)
You are planning an Exchange Server 2013 Deployment.
You plan to install exchange servers in two sites, SiteA and SiteB. You plan to add all exchange servers to a single database availability group (DAG) and have all of the databases replicated to all servers.
You implement the load balancers as configured in the following table:
You need to plan a solution that automatically allows all users to connect to their mailbox if all of the exchange servers in one site fail.
What should you include in the plan?
Create two host (A) records named mail.fabrikham.com that each point to one of the VIP’s.
Change the DAG settings of AllowCrossSiteRPCAccess to $True.
Create one host (A) record named site1.fabrikham.com that points to 192.168.1.10 and create one host (A) record named site2.fabrikham.com that points to 192.168.2.10.
Change the DAG setting of DatabaseAvailabilityGroupConfiguration to $Null.
Question No: 97 – (Topic 6)
Your company has a main office and a branch office. An Active Directory site exits for each office.
The offices are connected by a WAN link.
You plan to deploy Exchange Server 2013 in each site.
You need to identify the number of Exchange servers required to meet the following requirements:
Maintain user access to mailboxes if a single server fails.
Use the minimize account of Exchange servers in each site.
How many servers should you deploy in each site?
Question No: 98 HOTSPOT – (Topic 6)
You have an Exchange Server 2013 organization named contoso.com.
Your company, which is named Contoso, Ltd., has a partnership with another company named Fabrikam, Inc. Fabrikam has an Exchange Server 2013 organization.
Both organizations have a federation trust to the Microsoft Federation Gateway.
You need to ensure that the users at Fabrikam can see the free/busy information of the users at Contoso, including the time, the location, and the subject of appointments.
Which command should you run? (To answer, select the appropriate options in the answer area.)
Question No: 99 – (Topic 6)
You plan to deploy 20 Client Access servers that will have Exchange Server 2013 installed.
You need to prepare the certificate required for the planned deployment. The solution must ensure that the same certificate can be used on all of the Client Access servers.
What should you do first?
On each Client Access server, start the Certificates console and run the Certificate Import Wizard.
From the Exchange Admin Center, create a new certificate request.
On all of the Client Access servers, run the Get-ExchangeCertificate cmdlet.
On one of the Client Access servers, run the New-ExchangeCertificate cmdlet and specify the BinaryEncoding parameter.
Answer: B Explanation:
Configuring server certificates
In Exchange 2013, you can use the Certificate Wizard to request a digital certificate from a certification authority. After you’ve requested a digital certificate, you’ll need to install it on the Client Access server.
Reference: Exchange 2013 Client Access server configuration https://technet.microsoft.com/en-us/library/hh529912(v=exchg.150).aspx
Question No: 100 – (Topic 6)
You have an Exchange Server organization that contains five servers. The servers are configured as shown in the following table.
You need to create a Lync Server SIP Unified Messaging (UM) dial plan to enable voice integration between Lync Server and Exchange Server.
Which three Exchange servers should you associate to the UM dial plans? (Each correct answer presents part of the solution. Choose three.)
Answer: C,D,E Explanation:
C: You can enable Unified Messaging (UM) in Microsoft Exchange Server 2010. You must enable the Exchange computer running the Unified Messaging server role before the Unified Messaging server can process calls for UM-enabled Exchange 2010 recipients in your Exchange organization. However, the Unified Messaging server also must be added to a UM dial plan before it can process calls for Unified Messaging.
Requirements and Recommendations
Client Access and Mailbox. In Microsoft Exchange Server 2013, Exchange UM runs as a service on these servers.
Deploy the Exchange Mailbox server roles in each Exchange Unified Messaging (UM) forest where you want to enable users for Exchange UM.
Reference: Configuring Unified Messaging on Microsoft Exchange Server to Work with Lync Server 2013
|Lowest Price Guarantee||Yes||No||No|
|Free VCE Simulator||Yes||No||No|