MS-203 - Microsoft 365 Messaging Troubleshooting Message Transport Questions and Answers

Question 1

A user reports to the messaging administrator that an important email sent to an external partner was never received. The partner's IT team insists the message never reached their mail servers. Which tool should the administrator use FIRST to determine the final delivery status of the message from the Microsoft 365 perspective?

Accepted Answer

Message trace in the Exchange admin center

Answer

Message trace is the primary tool for following email messages as they travel through a Microsoft 365 organization. It allows an administrator to see if a message was received, rejected, deferred, or delivered by the service, and to view the detailed events that occurred for that message. This is the most direct and effective first step for troubleshooting a specific missing email.

Question 2

A user receives a Non-Delivery Report (NDR) with the enhanced status code '5.7.1'. Which of the following is the most common reason for this type of NDR?

Accepted Answer

The message was rejected due to a permissions issue or a mail flow rule.

Answer

The status code '5.7.1' typically indicates that delivery is not authorized. This can happen for several reasons, such as the sender not having permission to send to a specific recipient or distribution group, or a mail flow (transport) rule is configured to block the message.

Question 3

Your organization has configured an outbound connector to route all outgoing mail through a third-party cloud archiving service. Shortly after, you receive reports that external recipients are not receiving your emails, and bounce messages indicate an SPF failure. What is the most likely cause of this issue?

Accepted Answer

The organization's public SPF record in DNS has not been updated to include the third-party service.

Answer

When you route outbound mail through a third-party service (a smart host), the final server that sends the message to the internet is no longer Microsoft 365, but the third-party service. The recipient's mail server will check the sender's SPF record to see if the IP address of that third-party service is authorized to send email for your domain. If the SPF record is not updated to include the third-party service's sending servers, the check will fail.

Question 4

A mail flow rule with priority 0 is configured to bypass spam filtering for messages from a specific partner domain and has the 'Stop processing more rules' action enabled. A second rule with priority 1 is configured to prepend '[EXTERNAL]' to the subject of all messages received from outside the organization. Why would an email from the partner domain NOT have the '[EXTERNAL]' subject tag?

Accepted Answer

The 'Stop processing more rules' action on the priority 0 rule prevented the priority 1 rule from being evaluated.

Answer

Mail flow rules are processed in order of priority, starting with 0. When a message matches the conditions of the priority 0 rule, the rule's actions are applied. Because the 'Stop processing more rules' action is enabled on this rule, Exchange Online halts any further rule evaluation for that message. Therefore, the priority 1 rule is never processed for that email.

Question 5

Upon inspecting the headers of a failed email, a messaging administrator sees the authentication result 'dkim=fail (body hash did not verify)'. The sender has confirmed their DKIM public key is correct in DNS. What is the most likely cause for this specific failure?

Accepted Answer

The message body was altered in transit after it was signed.

Answer

The 'body hash did not verify' error specifically means that the receiving server was able to retrieve the public key from DNS but that the hash of the message body it calculated does not match the hash value stored in the DKIM signature. This is most often caused by an intermediate system (like a gateway or mailing list server) altering the message content, such as by adding a disclaimer, after the original DKIM signature was applied.

Microsoft 365 Messaging (MS-203) Practice Test

Microsoft 365 Messaging (MS-203) Practice Test

MS-203 - Microsoft 365 Messaging Troubleshooting Message Transport Questions and Answers