Microsoft 70-345 Study Guides 2021

NEW QUESTION 1
You are designing an Exchange Server 2021 organization. The organization will use a single namespace of
mail.contoso.com for all client access protocols. You plan to use load balancers.
You identify the following requirements for the load balancing solution:
• The Edge Transport server log files must contain the original IP address of the SMTP hosts.
• Clients must be able to connect only when they use the approved hostnames and the approved virtual directories.
You need to identify which type of load balancer meets each requirement.
What should you identify? To answer, select the appropriate options in the answer area.

Answer:

Explanation:

NEW QUESTION 2
You need to recommend a solution that meets the security requirements for the mailbox databases. What should you include in the recommendation?

• A. Resilient File System (ReFS)
• B. Transparent Data Encryption (TDE)
• C. BitLocker Drive Encryption (BitLocker)
• D. Encrypting Files System (EFS)

Answer: C

Explanation: Topic 4, Litware
Case study Exchange Server
Litware has an Exchange Server 2021 organization that uses the namespaces of mail.litware.com and autodiscover.litware.com.
The organization contains the servers configured as shown in the following table.

All Internet email is routed through HOU-EX1. Requirements
Business Goals
Litware has security concerns about the data and messaging content of the research and development department. Preventing information leaks is a priority.
All users must be able to access their corporate email from any device.
Litware plans to minimize the costs associated with changing the Exchange Server environment. Planned Changes
Litware plans to implement a site resilience solution ensuring that outbound email messages can be delivered if one of the sites fail. The site resilience solution must allow all users to access their mailbox if a server fails in each site.
Availability Requirements
Litware identifies the following availability requirements: Load balancing must support the following functionalities:
Load balancing must support the following functionalities:
Provide SSL termination
Remove failed Mailbox servers from the server pool.
Data collected by Managed Availability from Outlook on the web must be used.
Target server health must be configured as per-protocol so that only the affected client protocol is directed to another server if a server fails.
The site resilience solution must follow the bound namespace model.
Security Requirements
Litware identifies the following security requirements:
Users in the research and development department must be able to encrypt documents sent to external users. The encrypted email messages must never be forwarded by the external recipients.
Only specific research and development department users must be able to access confidential internal email regarding the high-security government contracts.
All certificates deployed to the Exchange organization must be issued by a trusted third-party certification authority (CA).
The principle of least privilege must be applied to all users and permissions. Compliance Requirements
Litware identifies the following compliance requirements:
Any new mailbox created for the auditing department must have a retention policy named Audit immediately applied manually after the mailbox is created.
Each week, a team of regulation auditors must review the email messages sent and received by all the research and development department users.
The regulation auditors must be able to review the email messages of mailboxes placed on Litigation Hold.
The regulation auditors must be able to gain quick access to the email messages.

NEW QUESTION 3
Your company has a data center. The data center contains a server that has Exchange Server 2021 and the Mailbox server role installed. Outlook anywhere clients connect to the Mailbox server by using the name outlook.contoso.com.
The company plans to open a second data center and to provision a database availability group (DAG) that spans both data centers.
You need to ensure that Outlook Anywhere clients can connect if one of the data centers becomes unavailable. What should you add to DNS?

• A. one A record
• B. two TXT records
• C. two SRV records
• D. one MX record

Answer: A

Explanation: References:
https://technet.microsoft.com/en-gb/library/dd638104(v=exchg.150).aspx?f=255&MSPPError=-2147217396

NEW QUESTION 4
You have an Exchange Server 2021 organization.
Some users access the mailbox on their mobile device by using Exchange ActiveSync.
You need to prevent the users from synchronizing more than one month of email or calendar data to their device.
Solutions: You deploy an Allow/Block/Quarantine policy.
Does this meet the goal?

• A. Yes
• B. No

Answer: B

Explanation:
The Allow/Block/Quarantine policy, or list, feature was designed to help IT organizations control which of the growing number of Exchange ActiveSync-enabled devices are allowed to connect to their Exchange Servers.
With this feature, organizations can choose which devices (or families of devices) can connect using Exchange ActiveSync (and conversely, which are blocked or quarantined).
References:
https://blogs.technet.microsoft.com/exchange/2010/11/15/controlling-exchange-activesyncdevice-access-using-t

NEW QUESTION 5
Your network contains a single Active Directory forest. The forest contains two sites named Site1 and Site2. Site 1 is an Internet-facing site. Site 2 is a non-lnternet-facing site.
You have an Exchange Server 2010 organization. The organization contains four servers. The servers are configured as shown in the following table.

The external namespaces of mail.contoso.com and autodiscover.contoso.com are associated to CAS1. Users who have a mailbox in Site2 use Outlook Anywhere to connect to their mailbox.
What should you run on CAS2?

Answer:

Explanation:

NEW QUESTION 6
You have an Exchange Server 2021 organization. You configure the organization for site resilience.
You have to Exchange servers named exch1.adatum.com and exch2.adatum.com. Each server is in a different data center. The certificates on both servers have a subject name of mail.adatum.com.
Outlook Anywhere is configured to use the fully qualified domain name (FQDN) of the server in the local data center.
You need to ensure that Outlook Anywhere remains connected after a database, server, or data center switchover.
Which command should you run?

• A. Set-OutlookProvider EXPR –CertPrincipalName msstd: ".adatum.com"
• B. Set-OutlookProvider –Identity msExchAutoDiscoverConfig –TTL 2
• C. Set–OutlookProvider -OutlookProviderFlags ExternalClientsRequireSSL
• D. Set–OutlookProvider EXPR –CertPrincipalName "msstd:mail.adatum.com"

Answer: A

Explanation: References: https://technet.microsoft.com/en-us/library/dd638104(v=exchg.160).aspx

NEW QUESTION 7
You have an Exchange Server 2021 organization. You plan to enable Federated Sharing.
You need to create a DNS record to store the Application Identifier (AppID) of the domain for the federated trust.
Which type of record should you create?

• A. A
• B. CNAME
• C. SRV
• D. TXT

Answer: D

Explanation: When you create a federation trust with the Azure AD authentication system, an application identifier (AppI is automatically generated for your Exchange organization and provided in the output of
the Get-FederationTrust cmdlet. The AppID is used by the Azure AD authentication system to uniquely identify your Exchange organization. It's also used by the Exchange organization to provide proof that your organization owns the domain for use with the Azure AD authentication system. This is done by creating a text (TXT) record in the public Domain Name System (DNS) zone for each federated domain.
References:
https://technet.microsoft.com/en-us/library/dd335047(v=exchg.150).aspx

NEW QUESTION 8
You need to ensure that members of a group named Relecloudadmins can create user accounts and mailboxes for new employees after the planned upgrade. What should you do first?

• A. Run theNew-ManagementRolecmdlet.
• B. Run theNew-ManagementRoleAssignmentcmc] e:
• C. Run setup.exe and specify the/PrepareDoma/nparameter.
• D. Run setup.exe and specify the/prepareADparameter.

Answer: B

Explanation: References:
https://technet.microsoft.com/en-us/library/dd335193(v=exchg.160).aspx

NEW QUESTION 9
You have an Exchange Server 2021 organization.
Some users access the mailbox on their mobile device by using Exchange ActiveSync.
You need to prevent the users from synchronizing more than one month of email or calendar data to their device.
Solution: You deploy a mobile device mailbox policy. Does this meet the goal?

• A. Yes
• B. No

Answer: B

Explanation:
You can use mobile device mailbox policies to manage many different settings. These include the following: Require a password
Specify the minimum password length
Require a number or special character in the password
Designate how long a device can be inactive before requiring the user to re-enter a password Wipe a device after a specific number of failed password attempts
References: https://technet.microsoft.com/en-us/library/bb123783(v=exchg.160).aspx

NEW QUESTION 10
You have an Exchange Server 2021 organization.
Some users access their mailbox by using an Android or an iOS device.
You need to prevent the users from using OWA for Devices to access their mailbox. Which cmdlet should you use?

• A. Set-CASMailbox
• B. Set-MobileMailboxPolicy
• C. Set-OWAVirtualDirectory
• D. Set-OWAMailboxPolicy

Answer: A

NEW QUESTION 11
You have an Exchange Server 2021 organization. The Active directory sites are configured as shown in the following graphic.

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic

Answer:

Explanation:

NEW QUESTION 12
You are deploying a new Exchange Server 2021 organization.
You deploy two servers named ex01.contoso.com and ex02.contoso.com to the organization.
You need to configure DNS to ensure that servers on the internet can send email messages to the organization by using an SMTP domain named contoso.com. The solution must ensure that ex02.contoso.com is used only if ex01.contoso.com becomes unavailable.
You create an MX record for contoso.com that points to ex01.contoso.com. The record has a preference value of 10
What command should you run? To answer, select the appropriate options in the answer area

Answer:

Explanation:

NEW QUESTION 13
Hotspot Question
You need to configure DAG01 to meet the availability requirements.
What command should you run? To answer, select the appropriate options in the answer area.

Answer:

Explanation:

NEW QUESTION 14
Your company has an Exchange Server 2021 organization. The organization contains three Mailbox servers.
You need to ensure that email messages sent to the company meet the following requirements:
- All of the messages sent from the SMTP domain of fabrikam.com must be blocked.
- All of the messages that contain the words "Fabrikam" or "Litware" must be quarantined.
Which anti-spam agent should you configure for each requirement? To answer, drag the appropriate agents to the correct requirements. Each agent may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

Answer:

Explanation:

NEW QUESTION 15
You have an Exchange Server 2021 organization.
A user named User1 delegates full control access to her mailbox to several users. User1 needs to track the delegates' actions when they access the mailbox.
Which activities can be tracked? For each activity, select Yes if the activity can be tracked. Otherwise, select No.

Answer:

Explanation:

NEW QUESTION 16
You need to recommend how many database availability groups (DAGs) and how many namespaces must be added to the site resilience solution to meet the availability requirements.
How many namespaces and DAGs should you recommend adding? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Answer:

Explanation: Box 1: Number of namespaces: Four Box 2: Number of Dags: Two
Depending on your architecture and infrastructure you have two choices: These choices are tied to the DAG architecture.
-Deploy a unified namespace for the site resilient datacenter pair (unbound model).
-In an unbound model, you have a single DAG deployed across the datacenter pair.
-Deploy a dedicated namespace for each datacenter in the site resilient pair (bound model).
In a bound model, multiple namespaces are preferred, two per datacenter (primary and failback namespaces), to prevent clients trying to connect to the datacenter where they may have no connectivity.
As its name implies, in a bound model, users are associated (or bound) to a specific datacenter. In other words, there is preference to have the users operate out of one datacenter during normal operations and only have the users operate out of the second datacenter during failure events. There is also a possibility that users do not have equal connectivity to both datacenters. Typically, in a bound model, there are two DAGs deployed in the datacenter pair. Each DAG contains a set of mailbox databases for a particular datacenter; by controlling where the databases are mounted, you control connectivity.
From scenario:
The servers in the New York and London offices are members of a database availability group (DAG).
Fabrikam identifies the following high-availability requirements for the planned deployment:
Mailbox databases that contain mailboxes for the New York office users must only be activated on the servers in the London office manually.
All client access connections to the London and New York offices must use load-balanced namespaces. The load balancing mechanism must perform health checks.
References: https://blogs.technet.microsoft.com/exchange/2015/10/06/namespace-planning-in-exchange-2021/