Core Solutions of Microsoft Exchange Server Free Sample Questions

For Kerberos authentication to function correctly with a Client Access Server array or load-balanced CAS, the credentials must be shared among the servers. This is accomplished by using a shared alternate service account (ASA) credential. The ms-Exch-EPI-Token-Serialization extended right allows Exchange servers to read and write the service principal name (SPN) and encryption keys from the alternate service account in Active Directory. The other cmdlets configure different aspects of authentication but do not address the core requirement of sharing Kerberos credentials.

The ReplayLagManagerEnabled property, which is enabled by default, allows the system to automatically play down log files for lagged copies when certain conditions are met, such as low disk space or when the lagged copy has been determined to be the only available copy for a specific period. This feature, also known as lazy log truncation, helps prevent the log drive from filling up while still preserving the intended replay lag for recovery purposes. Circular logging is incompatible with lagged copies. Setting TruncationLagTime delays truncation but is superseded by ReplayLagTime.

The most direct and efficient way to exempt a specific domain from a transport rule is to use the 'The sender's domain is...' exception. This condition specifically checks the domain part of the sender's email address. Using 'The sender's IP address is in the range' is less reliable as IP addresses can change. Creating a separate, higher-priority rule to stop processing is more complex than necessary. Using a message header is a valid but less straightforward method for this common requirement.

To prevent automatic failover to a specific site, you must block the activation of database copies in that site. This is achieved by setting the -DatabaseCopyAutoActivationPolicy parameter on the Mailbox server to Blocked. This ensures that even if the server is part of the DAG and has healthy database copies, Managed Availability will not automatically activate them. A manual server switchover would be required to bring the databases online in DC3. DAC mode is necessary for site resilience but doesn't prevent failover to a specific site. Activation preference influences the target of a failover but doesn't block it.

The New-Mailbox -Room cmdlet is the correct command to create a new room mailbox, which is a specific type of resource mailbox.

The Set-CalendarProcessing cmdlet is used to configure the automated booking policies for a resource mailbox. Setting AutomateProcessing to AutoAccept fulfills the requirement for automatic acceptance, and -DeleteComments $true fulfills the requirement to remove comments.

This statement is false. In Exchange 2013, a Client Access server will only proxy connections to Mailbox servers within its own Active Directory site. If a user connects to a CAS in a different site from their active mailbox, that CAS will proxy the connection to a CAS in the correct AD site, which will then communicate with the Mailbox server. This behavior is known as a double-hop proxy and maintains site affinity.

DLP policies are implemented as transport rules. The action of a transport rule can be configured to allow a user override with a business justification. When this is enabled, the user is presented with a Policy Tip in Outlook explaining the violation. The user can then choose to override the block and provide a reason, which is logged for auditing purposes. This meets the requirement of allowing an exception with justification.

The /m:RecoverServer switch is used with Setup.exe to perform a disaster recovery installation of a failed Exchange server. This process reads the configuration information for the server from Active Directory and applies it to the new hardware, effectively rebuilding the server to its pre-failure state without needing a backup of the server itself.

The root cause of the problem is a certificate name mismatch. The client is trying to connect to autod.corp.contoso.com, but the certificate presented by the server is only valid for mail.contoso.com. The best practice and most effective solution is to reissue the SSL certificate to include all necessary hostnames (like autodiscover, OWA, etc.) as Subject Alternative Names (SANs). This ensures that clients can validate the certificate for all services they connect to. Changing internal URIs to match the external name is another valid approach (split-brain DNS), but reissuing the certificate is often the more direct solution if other internal services rely on the corp namespace.

A retention policy is the container object that is applied to mailboxes. It links together one or more retention tags to enforce the desired messaging records management (MRM) settings.

Retention tags define the specific actions and timeframes. You would need at least two: a Default Policy Tag (DPT) with a 'Move to Archive' action after 730 days (2 years), and another DPT with a 'Permanently Delete' action after 2555 days (7 years) that applies to the archive.