Skip Navigation Links

Archive - 70-345: Designing and Deploying Microsoft Exchange Server 2016

Sample Questions

Question: 160
Measured Skill: Plan, deploy, and manage an Exchange infrastructure, recipients, and security (15–20%)

Your network contains a single Active Directory forest named The forest contains an Exchange Server 2016 organization.

Contoso recently acquired a subsidiary named Fabrikam, Inc. The network at Fabrikam contains a single Active Directory forest named

In the forest, you plan to create mailboxes for all of the users at Fabrikam.

You need to recommend which actions must be performed to create a mailbox for a newly hired Fabrikam employee.

Which three actions should you recommend?

(Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.)

AIn, create a user account.
B In, disable a user account.
C Create a one-way trust in which the forest trusts the forest.
D Create a one-way trust in which the forest trusts the forest.
E In, create a linked mailbox.
F In, disable a user account.

Correct answer: A, D, E


Linked mailboxes may be necessary for organizations that deploy Exchange in a resource forest. The resource forest scenario lets an organization centralize Exchange in a single forest, while allowing access to the Exchange organization with user accounts that are located in one or more trusted forests (called account forests). The user account that accesses the linked mailbox doesn't exist in the forest where Exchange is deployed. Therefore, a disabled user account that exists in the same forest as Exchange is created and associated with the corresponding linked mailbox.

A trust between the Exchange forest and at least one account forest must be set up before you can create linked mailboxes. At a minimum, you must set up a one-way, outgoing trust so that the Exchange forest trusts the account forest.

Reference: Manage linked mailboxes

Question: 161
Measured Skill: Plan, deploy, manage, and troubleshoot client access services (15–20%)

You have an Exchange Server 2016 organization. The organization contains a server named EX01.

Users report that they receive the error message shown in the following graphic when they open Microsoft Outlook.

You need to prevent the users from receiving the error message when they open Outlook.

Which command should you use?

B Set-MailboxServer
C Set-ClientAccessServer
D Set-RpcClientAccess

Correct answer: C


Generally, this issue occurs when the URL that you are trying to access is not listed in either the Subject or the Subject Alternative Name (SAN) of the Secure Sockets Layer (SSL) certificate for the website. Although different organizations' configurations may differ slightly, this issue typically occurs because the organization's Autodiscover Domain Name System (DNS) records are configured incorrectly.

We should either use the Set-ClientAccessServer cmdlet to modify the Autodicover URL or change the certificate for the Autodiscover virtual directory.

"The name on the security certificate is invalid or does not match the name of the site" error in Outlook in a dedicated or ITAR Office 365 environment

Question: 162
Measured Skill: Plan, deploy, manage, and troubleshoot mailbox databases (15–20%)

Your company has two offices. Each office contains a data center. Each data center is configured as a separate Active Directory site.

The data centers contain five servers that have Exchange Server 2016 installed. The servers are configured as shown in the following table.

All of the servers are members of a database availability group (DAG) named DAG1. Each server contains several mailbox database copies.

You plan to shut down EX1 to replace several hardware components. You expect that EX1 will be restarted in one week.

You need to manually exclude EX1 from cluster voting during the planned maintenance period.

What should you run?

ASet-MailboxServer EX1 -DatabaseCopyAutoActivationPolicy Blocked
B Stop-DatabaseAvailabilityGroup DAG1 –MailboxServer EX1
Restore-DatabaseAvailabilityGroup –ActiveDirectorySite Site1
C Stop-DatabaseAvailabilityGroup DAG1 –ActiveDirectorySite Site1
Restore-DatabaseAvailabilityGroup –ActiveDirectorySite Site2
D Remove-DatabaseAvailabilityGroupServer EX1

Correct answer: B


The Stop-DatabaseAvailabilityGroup cmdlet is used during a datacenter switchover. This cmdlet is used to mark one or members of the DAG as failed (also known as stopped).

The Restore-DatabaseAvailabilityGroup cmdlet performs several operations that affect the structure and membership of the DAG's cluster. This task does the following:
  • Forcibly evicts the servers listed on the StoppedMailboxServers list from the DAG's cluster, thereby reestablishing quorum for the cluster enabling the surviving DAG members to start and provide service.

  • Configures the DAG to use the alternate witness server if there is an even number of surviving DAG members, or a single surviving DAG member.



Question: 163
Measured Skill: Implement and manage coexistence, hybrid scenarios, migration, and federation (10–15%)

You are upgrading your Exchange Server 2010 organization to Exchange Server 2016.

You begin the migration to modern public folders.

You create public folder mailboxes. You start the migration batches and ensure that the batches have completed.

You need to finalize the migration to the modern public folders.

Which command should you run first?

(To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.)

A1st cmdlet: New-Mailbox -PublicFolderMigrationComplete $true
2nd cmdlet: Set-OrganizationConfig -PublicFolderEnabled Local
B 1st cmdlet: New-Mailbox -PublicFolderLockedForMigration $true
2nd cmdlet: New-Mailbox -PublicFolderLockedForMigration $true
C 1st cmdlet: Set-OrganizationConfig -PublicFolderEnabled Remote
2nd cmdlet: Set-OrganizationConfig -PublicFolderMigrationComplete $true
D 1st cmdlet: Set-OrganizationConfig -PublicFolderLockedForMigration $true
2nd cmdlet: Set-PublicFolder -PublicFolderEnabled Local
E 1st cmdlet: Set-PublicFolder -PublicFolderEnabled Remote
2nd cmdlet: New-Mailbox -PublicFolderMigrationComplete $true
F 1st cmdlet: Set-PublicFolder -PublicFolderMigrationComplete $true
2nd cmdlet: Set-PublicFolder -PublicFolderLockedForMigration $true

Correct answer: C


The batch migration method is the only supported method for migrating legacy public folders to Exchange 2016. The old serial migration method for migrating public folders is being deprecated and is no longer supported by Microsoft.

Finalize the public folder migration

First, run the following cmdlet to change the Exchange 2016 deployment type to Remote:

Set-OrganizationConfig -PublicFoldersEnabled Remote

Once that is done, you can complete the public folder migration by running the following command:

Set-OrganizationConfig -PublicFolderMigrationComplete $true

Or alternative:

Complete-MigrationBatch PublicFolderMigration

Reference: Use batch migration to migrate public folders to Exchange 2016 from previous versions

Question: 164
Measured Skill: Plan, deploy, and manage an Exchange infrastructure, recipients, and security (15–20%)

You work as an administrator for a company. You have an Exchange Server 2016 organization.

You need to assign the following permissions:
  • A user named User1 must be able to monitor the Exchange services and components.
  • A user named User2 must be able to install provisioned Exchange servers.
The solution must use the principle of least privilege.

Which role should you assign to each user?

(To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.)

AUser1: Organization Management
User2: Delegated Setup
B User1: View-Only Organization Management
User2: Server Management
C User1: Discovery Management
User2: Discovery Management
D User1: View-Only Organization Management
User2: Delegated Setup
E User1: Server Management
User2: Organization Management
F User1: Security Reader
User2: Organization Management

Correct answer: D


The View-Only Organization Management management role group is one of several built-in role groups that make up the Role Based Access Control (RBAC) permissions model in Microsoft Exchange Server 2016.

Administrators who are members of the View-Only Organization Management role group can view the properties of any object in the Exchange organization.

Install provisioned Exchange servers
In large companies, people who install and configure new Windows servers often aren't Exchange administrators. In Exchange 2016 and Exchange 2019, these users can still install Exchange on Windows servers, but only after an Exchange administrator provisions the Exchange server object in Active Directory. Provisioning an Exchange server object makes all of the required Active Directory changes independently of the actual installation of Exchange on a server. An Exchange administrator can provision a new Exchange server object hours or even days before Exchange is installed.

After an Exchange administrator provisions the Exchange server object, the only requirement for installing Exchange on the server is membership in the Delegated Setup role group, which allows members to install Exchange on provisioned servers. If this sounds like something you want to do, then this topic is for you.


View-only Organization Management

Delegate the installation of Exchange servers

Tags: exam, examcollection, exam simulation, exam questions, questions & answers, training course, study guide, vce, braindumps, practice test

© Copyright 2014 - 2021 by