Which command should you recommend?

###BeginCaseStudy###
Case Study: 5
Proseware, Inc
Overview
General Overview
Proseware, Inc., is an international manufacturing company that has 1,000 users. Proseware
has a sales department, a marketing department, a research department, and a human
resources department.
Proseware purchases another company named Contoso, Ltd. Contoso has 500 users.
Physical Locations
Proseware has two main offices located in New York and London.
The offices connect to each other by using a WAN link. Each office connects directly to the
Internet. Contoso has a single office in Dallas.
Existing Environment
Active Directory Environment
The Proseware network contains an Active Directory forest named proseware.com. The
forest contains a single domain. All domain controllers run Windows Server 2012.
Each office contains three domain controllers. Each office is configured as an Active
Directory site.
The Contoso network contains an Active Directory forest named contoso.com. The forest
contains a single domain. All domain controllers run Windows Server 2012.
Exchange Server Organization
Proseware has an Exchange Server 2013 organization that contains four servers. The servers
are configured as shown in the following table.

EX3 and EX4 are the members of a database availability group (DAG) named DAG1. DAG1
has two DAG networks. The networks are configured as shown in the following table.

Users connect to mail.proseware.com for Microsoft Outlook and Outlook Web App services.
Mail.proseware.com resolves to an IP address on a hardware load balancer.
All Outlook Anywhere users are enabled for Cached Exchange Mode.
Proseware pilots a hybrid deployment of Exchange Server 2013 and Microsoft Office 365.
The mailbox of each pilot user is moved to Office 365. For the pilot mailboxes, all inbound
email messages from the Internet are delivered to the Exchange Server organization, and then
forwarded to Office 365.
Contoso has an Exchange Server 2010 organization.
Problem Statements

Proseware identifies the following issues:
• MapiNet is saturated with network traffic caused by the database
replication between the members of DAG1 over MapiNet.
• The pilot users report that entries added to their Safe Senders list and
their Blocked Senders list fail to work.
• A recent power outage in the New York office prevents all users from
accessing their mailbox.
• A user named User1 reports that email messages are being sent from
her mailbox without her consent.
Requirements
Planned Changes
Proseware plans to implement the following changes:
• Several users at Contoso will use a mailbox at Proseware as their
primary mailbox. The Contoso users will use Autodiscover to
configure their client settings and will use single sign-on.
• For a special project, an IT administrator will create 20 distribution
groups that will each contain 200 members.
• Certain users in both companies will have a contoso.com SMTP suffix
as their primary email address.
Technical Requirements
Proseware identifies the following technical requirements for the Exchange Server
organization:
• Internal email messages must be rejected if the messages cannot be
protected by using Shadow Redundancy.
• All database replication between DAG1 members must occur over the
ReplNet network.
Site Resiliency Requirements
Proseware identifies the following site resiliency requirements for the Exchange Server
organization:
• All mailboxes must be available if a single site becomes unavailable.
The solution must not require administrator intervention.
• User traffic on the WAN links must be minimized.
Email Security Requirements
Proseware identifies the following requirements for securing email messages:
• Email recipients must be able to identify whether an email message
was modified during delivery.
• All email messages stored in the mailbox databases must be protected
from theft.
• Users must be able to encrypt email messages from Outlook Web App.
Retention Requirements
Proseware plans to reduce mailbox server storage usage and to limit company liability.
Proseware identifies the following requirements:
• Email messages in the Deleted Items folder must be retained for only
30 days.
• Email messages in a mailbox folder named Projects must be retained
for 540 days, unless the messages contain contractual information.
• Email messages in the Projects folder that contain contractual
information must be retained indefinitely.
• All other email messages must be removed after one year.

###EndCaseStudy###

HOTSPOT
You need to recommend a solution to audit the issue of User1.
Which command should you recommend? (To answer, select the appropriate options in the answer
area.)

Answer:

Explanation:
Scenario: A user named User1 reports that email messages are being sent from her mailbox without
her consent.
For mailboxes in your organization that you wish to enable audit logging on you can do so using the
Set-Mailbox cmdlet.
* The AuditDelegate parameter specifies the operations to log for delegate users. Valid values
include:
None Update Move MoveToDeletedItems SoftDelete HardDelete FolderBind SendAs SendOnBehalf
* Send As This permission allows delegates to use the mailbox to send messages. After this
permission is assigned to a delegate, any message that the delegate sends from the mailbox will
appear to have been sent by the mailbox owner.
Incorrect:
Send on Behalf This permission also allows a delegate to use the mailbox to send messages. After
this permission is assigned to a delegate, the From address in any message sent by the delegate
indicates that the message was sent by the delegate on behalf of the mailbox owner.
* The AuditEnabled parameter specifies whether to enable or disable mailbox audit logging. If
auditing is enabled, actions specified in the AuditAdmin, AuditDelegate, and AuditOwner parameters
are logged. Valid values include:
$true Mailbox audit logging is enabled.
$false Mailbox audit logging is disabled.
The default value is $false.

Set-Mailbox
https://technet.microsoft.com/en-us/library/bb123981(v=exchg.150).aspx