MCTS - Microsoft Certified Technology Specialist Exchange Server 2010 Configuration Questions and Answers 1 — Questions and Answers
Question 1: An administrator is deploying a new two-node Exchange 2010 Database Availability Group (DAG) in a single Active Directory site. To maintain quorum in the event of a server failure, a File Share Witness (FSW) is required. Which of the following is a valid configuration for the witness server?
- A Hub Transport server running Windows Server 2008 in the same forest. (Correct answer)
- A member server of the Database Availability Group.
- An Edge Transport server in the perimeter network.
- Any server running Windows Server 2003 Standard Edition.
Correct answer: A Hub Transport server running Windows Server 2008 in the same forest.
The witness server for an Exchange 2010 DAG must be a Windows Server in the same Active Directory forest as the DAG, but it cannot be a member of the DAG itself. While it's often recommended to use a Hub Transport server in the same site for convenience, any supported Windows Server (2003 R2 or later) in the forest is technically valid. An Edge Transport server is not in the same forest, and a DAG member cannot witness itself. Windows Server 2003 Standard is not sufficient; 2003 R2 or later is required.
Question 2: A company's legal department requires that a standard confidentiality disclaimer be appended to every email sent from any user inside the organization to any external recipient. Which Exchange 2010 feature should an administrator configure on the Hub Transport server role to meet this requirement?
- Journaling Rules
- Retention Policies
- Transport Rules (Correct answer)
- Outlook Web App Policies
Correct answer: Transport Rules
Transport Rules, configured on the Hub Transport server role, are designed to inspect messages in transit and take actions based on specified conditions. One of the common actions is to append a disclaimer to messages that meet criteria, such as being sent to recipients outside the organization. Journaling is for recording communications, retention policies are for lifecycle management, and OWA policies control the web client features.
Question 3: An administrator needs to create a new mailbox for a user whose Active Directory account was created last week by the help desk team. The user account currently exists but does not have any Exchange attributes. Which Exchange Management Shell cmdlet should be used to accomplish this task?
- New-Mailbox
- New-MailUser
- Enable-Mailbox (Correct answer)
- Set-User
Correct answer: Enable-Mailbox
The `Enable-Mailbox` cmdlet is specifically used to mailbox-enable an existing Active Directory user who does not already have a mailbox. The `New-Mailbox` cmdlet creates both the Active Directory user account and the mailbox simultaneously. `New-MailUser` is for associating an external email address with an AD account, and `Set-User` modifies existing AD user properties but does not create mailboxes.
Question 4: To improve high availability for Outlook MAPI clients, an administrator wants to provide a single, consistent connection point for RPC client access, regardless of which Mailbox server in a DAG is hosting the active database copy. What Exchange 2010 object must be created?
- A Federation Trust
- An SMTP Send Connector
- A new Active Directory Site
- A Client Access server array (Correct answer)
Correct answer: A Client Access server array
A Client Access server (CAS) array is an Active Directory object that represents a load-balanced set of CAS servers within a single AD site. When a CAS array is configured, the `RpcClientAccessServer` attribute of the mailbox databases is pointed to the array's fully qualified domain name (FQDN). This provides a single namespace for Outlook (MAPI/RPC) clients to connect to, abstracting them from the underlying server infrastructure and improving the failover experience.
Question 5: In the Exchange 2010 Role Based Access Control (RBAC) model, what component serves as a container for management roles and is assigned to administrators to grant permissions?
- Management Role Scope
- Management Role Assignment
- Management Role Group (Correct answer)
- Management Role Entry
Correct answer: Management Role Group
A Management Role Group is a universal security group (USG) that contains users, mail-enabled USGs, and other role groups. Management roles are assigned to a role group, and administrators are made members of that group, thereby granting them all the permissions defined by the roles. A Role Entry is a single cmdlet (a task), a Role Assignment links a role to a group, and a Role Scope defines where the permissions can be applied.
Question 6: An administrator wants to prevent a specific group of users from being able to use the 'Change Password' feature within the Outlook Web App (OWA) interface. Which of the following should be created and applied to these users' mailboxes?
- A custom Transport Rule
- An ActiveSync Mailbox Policy
- A new Retention Policy Tag
- An Outlook Web App Mailbox Policy (Correct answer)
Correct answer: An Outlook Web App Mailbox Policy
Outlook Web App Mailbox Policies are used to control the features available to users within the OWA interface. An administrator can create a custom policy that disables specific features, such as 'Change Password', and then apply that policy to the desired mailboxes to enforce the restriction.
MCTS - Microsoft Certified Technology Specialist Exchange Server 2010 Configuration Questions and Answers 1
An administrator is deploying a new two-node Exchange 2010 Database Availability Group (DAG) in a single Active Directory site.
To maintain quorum in the event of a server failure, a File Share Witness (FSW) is required.
Which of the following is a valid configuration for the witness server?