Ensurepass

QUESTION 38

You have an Exchange Server 2013 organization that contains two Client Access servers named SERVER1 and SERVER2 and two Mailbox servers named SERVER3 and SERVER4. You have a firewall that controls all of the traffic between the internal network and the Internet. SERVER3 and SERVER4 are prevented from communicating with Internet hosts. SERVER1 and SERVER3 are in a site named Main. SERVER2 and SERVER4 are in a site named Main_2. All outbound email is sent through SERVER1. Main fails. You discover that email messages for the Internet are queued on SERVER4. You create a new send connector in Main_2. You discover that all of the outbound email is queued on SERVER4 and is not delivered to the Internet. You verify that the client computers on the network can receive email messages from the Internet successfully. You need to ensure that the email messages are delivered successfully to the Internet. Which cmdlet should you run?

 

A.

Set-SendConnector

B.

Set-TransportService

C.

Set-ExchangeServer

D.

Set-ADSite

 

Correct Answer: A

Explanation:

Mailbox Server

In an Exchange Server 2013 organization the Mailbox server role is responsible for sending outbound email via a Send Connector.

 

70-341-demo-
60

When this option is enabled outbound email that is being sent via a Send Connector does not go directly out from the Mailbox server, and instead is proxied through a Client Access server in the site. There is nothing complicated going on here, the Client Access server simply acts as a proxy for the connection so that the receiving host out on the internet sees the connection as coming from the Client Access server name and IP address rather than the Mailbox server. IN THIS QUESTION THE CLIENT ACCESS SERVER (SERVER1) IS ACTING AS A PROXY SERVER FOR THE MAILBOX SERVERS.

NEED TO CHANGE THE SEND CONNECTOR SETTINGS IN ORDER FOR MAIL TO FLOW OUT FROM SERVER4 TO THE INTERNET.

Correct Answer A

Set-SendConnector

Use the Set-SendConnector cmdlet to modify a Send connector.

EXAMPLE 1

This example makes the following configuration changes to the Send connector named

Contoso.com Send

Connector:

Sets the maximum message size limit to 10 MB.

Changes the connection inactivity time-out to 15 minutes. Set-SendConnector “Contoso.com Send Connector” -MaxMessageSize 10MB – ConnectionInactivityTimeOut

00:15:00

Send Connector

In Microsoft Exchange Server 2013, a Send connector controls the flow of outbound messages to the receiving server.

They are configured on Mailbox servers running the Transport service. Most commonly, you configure a Send connector to send outbound email messages to a smart host or directly to their recipient, using DNS.

Exchange 2013 Mailbox servers running the Transport service require Send connectors to deliver messages to the next hop on the way to their destination. Send connectors that are created on Mailbox servers are stored in Active Directory and are available to all Mailbox servers running the Transport service in the organization.

 

70-341-demo-61

 

 

70-341-demo-62

 

 

70-341-demo-63

 

NOT B

Set-transportservice

Use the Set-TransportService cmdlet to set the transport configuration options for the Transport service on Mailbox servers or for Edge Transport servers. This example sets the

TransientFailureRetryCount parameter to 3 and sets the TransientFailureRetryInterval parameter to 30 seconds for the Transport service on a Mailbox server named Mailbox01.

Set-TransportService Mailbox01 -TransientFailureRetryCount 3 -TransientFailureRetryInterval

00:00:30

NOT C

Will not resolve the issue

Set-ExchangeServer

Use the Set-ExchangeServer cmdlet to set Exchange attributes in Active Directory for a specified server.

For information about the parameter sets in the Syntax section below, see Syntax.

EXAMPLE 1

This example disables error reporting on the specified server. Set-ExchangeServer -Identity TestServer.Contoso.com -ErrorReportingEnabled: $false NOT D

Will not resolve the issue

Set-ADSite

Use the Set-AdSite cmdlet to configure the Exchange settings of Active Directory sites.

EXAMPLE 1

This example configures the Active Directory site named Default-First-Site-Name as a hub site. Set-AdSite Default-First-Site-Name -HubSiteEnabled $true

 

 

QUESTION 39

You have an Exchange Server 2013 organization named adatum.com. The organization contains five Mailbox servers and two Client Access servers. You need to ensure that an administrator named user1 receives a daily email message that contains a log of all the Exchange Server administrative actions. Which cmdlet should you use in a scheduled task?

A.

Search-AdminAuditLog

B.

Set-Mailbox

C.

New-AdminAuditLogSearch

D.

Set-ExchangeServer

E.

Set-AdminAuditLogConfig

 

Correct Answer: C

Explanation:

NOT A

Use Search-AdminAuditLog for searching through the audit logs.

Search-AdminAuditLog

Use the Search-AdminAuditLog cmdlet to search the contents of the administrator audit log. For information about the parameter sets in the Syntax section below, see Syntax.

EXAMPLE 1

This example finds all the administrator audit log entries that contain either the New-RoleGroup or the New-ManagementRoleAssignment cmdlet.

Search-AdminAuditLog -Cmdlets New-RoleGroup, New-ManagementRoleAssignment NOT B

Set-Mailbox

Use the Set-Mailbox cmdlet to modify the settings of an existing mailbox. You can use this cmdlet for one mailbox at a time.

To perform bulk management, you can pipeline the output of various Get- cmdlets (for example, the Get-Mailbox or Get-User cmdlets) and configure several mailboxes in a single-line command. You can also use the Set-Mailbox cmdlet in scripts.

For information about the parameter sets in the Syntax section below, see Syntax.

EXAMPLE 1

This example delivers John Woods’s email messages to John’s mailbox and also forwards them to Manuel Oliveira’s (manuel@contoso.com) mailbox.

Set-Mailbox -Identity John -DeliverToMailboxAndForward $true -ForwardingSMTPAddress manuel@contoso.com

NOT D

Set-ExchangeServer

Use the Set-ExchangeServer cmdlet to set Exchange attributes in Active Directory for a specified server.

For information about the parameter sets in the Syntax section below, see Syntax.

EXAMPLE 1

This example disables error reporting on the specified server. Set-ExchangeServer -Identity TestServer.Contoso.com -ErrorReportingEnabled: $false NOT E

NOT Set-AdminAuditLogConfig

Use the Set-AdminAuditLogConfig cmdlet to configure the administrator audit logging configuration settings.

EXAMPLE 1

This example enables administrator audit logging for every cmdlet and every parameter in the organization, with the exception of Get cmdlets.

Set-AdminAuditLogConfig -AdminAuditLogEnabled $true -AdminAuditLogCmdlets * – AdminAuditLogParameters *

C

New-AdminAuditLogSearch

Use the New-AdminAuditLogSearch cmdlet to search the contents of the administrator audit log and send the results to one or more mailboxes that you specify. For information about the parameter sets in the Syntax section below, see Syntax.

EXAMPLE 1

This example finds all the administrator audit log entries that match the following criteria and sends the results to the david@contoso.com and chris@contoso.com SMTP addresses:

Cmdlets Set-Mailbox Parameters UseDatabaseQuotaDefaults, ProhibitSendReceiveQuota, ProhibitSendQuota StartDate 01/24/2012 EndDate 02/12/2012 New-AdminAuditLogSearch -Name “Mailbox Quota Change Audit” -Cmdlets Set-Mailbox -Parameters UseDatabaseQuotaDefaults, ProhibitSendReceiveQuota, ProhibitSendQuota -StartDate 01/24/2012 – EndDate

02/12/2012 -StatusMailRecipients david@contoso.com, chris@contoso.com

 

 

QUESTION 40

You have an Exchange Server 2013 organization. You plan to deploy Exchange ActiveSync for mobile devices. Each mobile device will be authenticated by using certificates issued by an internal certification authority (CA). You need to configure the organization to authenticate the mobile devices by using the certificates. Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)

 

A.

From Internet Information Services (IIS) Manager on each Client Access server, configure the

Microsoft-Server-ActiveSync virtual directory to require client certificates.

B.

From Exchange Admin Center, configure the Microsoft-Server-ActiveSync virtual directory to require

client certificates.

C.

From Internet Information Services (IIS) Manager on each Client Access server, enable Active Directory

Client Certificate Authentication.

D.

From Internet Information Services (IIS) Manager on each Mailbox server, enable Active Directory Client

Certificate Authentication.

 

Correct Answer: BC

Explanation:

NOT A

Enable Active Directory Client Certificate Authentication within IIS but configure the Microsoft- Server-ActiveSync virtual directory to require client certificates is performed in Exchange Admin Center

NOT D

IIS is configured on the Client Access Server not the Mailbox Server B

After you’ve installed the Exchange 2013 Client Access server, there are a variety of configuration tasks that you can perform.

Although the Client Access server in Exchange 2013 doesn’t handle processing for the client protocols, several settings need to be applied to the Client Access server, including virtual directory settings and certificate settings.

http://technet.microsoft.com/en-us/library/gg247612(v=exchg.150).aspx Exchange Server 2013 automatically configures multiple Internet Information Services (IIS) virtual directories during installation.

This topic contains information about the default IIS authentication settings and default Secure Sockets Layer (SSL) settings for the Client Access and Mailbox servers. The following table lists the default settings on a stand-alone Exchange 2013 Client Access server. Default Client Access server IIS authentication and SSL settings Virtual directory Authentication method SSL settings

Management method

Microsoft-Server-ActiveSync Basic authentication SSL required Requires 128-bit encryption EAC or Shell

 

70-341-demo-64

 

 

70-341-demo-65

 

C

Configure certificate-based authentication for Exchange ActiveSync

http://blogs.technet.com/b/exchange/archive/2012/11/28/configure-certificate-based- authentication-forexchange-

activesync.aspx

Client Access Server Configuration

To configure the Client Access server to enforce certificate based authentication :

1. Verify if Certificate Mapping Authentication is installed on the server. Right click on Computer in the start menu and choose Manage.

Expand Roles and click on Web Server (IIS)

Scroll down to the Role Services section. Under the Security section you should see Client Certificate Mapping

Authentication installed.

 

70-341-demo-66

 

 

70-341-demo-67

 

If you don’t see Client Certificate Mapping Authentication installed, click add Role Services > (scroll) Security and select Client Certificate Mapping Authentication and then click Install.

Reboot your server.

 

 

70-341-demo-68

 

Instant Access to Download Latest Complete Collection of Microsoft MCSE 70-341 Real Exam

Try Microsoft MCSE 70-341 Free Demo

 

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.