HOTSPOT
Case study
Overview
Relecloud is manufacturing company that has 25,000 employees. The company has sales, marketing, human
resources, development, research, accounting, and quality assurance departments.
Relecloud has a single office located in Montreal.
Active Directory EnvironmentThe network contains a single Active Directory forest named relecloud.com. The forest contains a single
domain and a single Active Directory site.
All servers run Windows Server 2012 R2 and are members of the domain. All client computers run Windows 10
and are members of the domain.
The Active Directory forest is prepared for Exchange Server 2016.
Email Environment
Relecloud has an Exchange Server 2013 Service Pack (SP1) organization. The organization contains six
servers. The servers are configured as shown in the following table.
The organization has the following configurations:
EX1, EX2, and EX3 are members of a database availability group (DAG) named DAG1.
Edge Synchronization is configured for the Active Directory site.
All client computers have Microsoft Outlook 2013 SP1 installed.
All inbound and outbound mail flow is routed through EdgeEX.
Antispam transport agents are configured on EdgeEX.
Active Directory split permissions are enabled.
Outlook Anywhere is enabled.
Developers at Relecloud develop applications that send email notifications. These notifications are sent by
using an SMTP client.
Requirements
Planned Changes
Relecloud plans to upgrade all of the Mailbox and Client Access servers to Exchange Server 2016.
The servers will host all of the mailboxes in the organization. The SMTP clients used by the development
department users will use the new email servers to relay email messages.
Connectivity Requirements
Relecloud identifies the following connectivity requirements:
The default connection method for the Outlook clients must be MAPI over HTTP.
All Exchange ActiveSync users must be prevented from sending email messages that are larger than 1 MB.
Compliance Requirements
Relecloud identifies the following compliance requirements:
Prevent all users in the organization from deleting email messages that contain the word RelecloudFutures.
Log all of the details that relate to the creation of new mailboxes.Availability Requirements:
Relecloud identifies the following availability requirements:
Implement a new Exchange Server 2016 DAG.
Maintain multiple copies of the mailbox information during the upgrade process to Exchange Server 2016.
You need to meet the compliance requirements for the creation of new mailboxes after the planned upgrade.
What command should you run? To answer, select the appropriate options in the answer area.
Hot Area:
Explanation:
https://technet.microsoft.com/en-us/library/bb123981(v=exchg.160).aspx
First command (for q):
Set-Mailbox -AuditEnabled $true
(extra info) Which would then enable you to audit the New-Mailbox cmdlet:
Set-AdminAuditLogConfig -AdminAuditLogCmdlets -“New-Mailbox”
https://technet.microsoft.com/en-us/library/bb123981(v=exchg.160).aspx
The AuditEnabled parameter must be set to $true to enable mailbox audit logging.
https://technet.microsoft.com/en-us/library/dd298169(v=exchg.160).aspx
Set-AdminAuditLogConfig –AdminAuditLogCmdlets -NewMailbox should be the correct answer ?
Mat, please check out my original comment…you have to initially enable mailbox auditing with the first command, then you can do what you said (which is what I thought the answer to be as well until I checked it out a bit more)
I think? :/
Not so sure of this one now. Normally, Set-Mailbox has “-identity MailboxID” then other parameters. Identity is a required parameter…makes me think it’s the other answer of Set-AdminAutoLogConfig as -Identity is not specified in the q.
a. Set-AdminAuditLogConfig –AdminAuditLogCmdlets NewMailbox
b. https://technet.microsoft.com/fr-fr/library/dd298169(v=exchg.160).aspx
c. https://social.technet.microsoft.com/Forums/en-US/af333486-059e-47d2-bedf-9b552703a304/how-to-audit-specific-cmdlets-for-specific-userid-using-setadminauditlogconfig?forum=exchangesvradmin
The correct answer is Set-AdminAuditLogConfig –AdminAuditLogCmdlets -NewMailbox
Enabling audit, do not prevent users from deleting anything. It just says, who/when/whats being deleted.
I agree with this due to the syntax provided in the question.