Your company recently deployed Exchange Server 2016.
Users use a variety of mobile devices to access their mailbox, including iPhones and iPads.
You need to configure security for the users who connect to the corporate network by using their mobile device.
The solution must meet the following requirements:
Users must be required to enter a complex password to unlock their device.
Only devices that run iOS 8 or later must be allowed to connect to the Exchange Server organization.
Users who fail to download the security settings defined by the organization must be prevented fromaccessing their mailbox.
Which cmdlet should you use for each requirement? To answer, drag the appropriate cmdlets to the correct
requirements. Each cmdlet may be used once, more than once, or not at all. You may need to drag the split bar
between panes or scroll to view content.
Select and Place:
Answer: 
Explanation:
https://technet.microsoft.com/en-us/library/dd876923(v=exchg.160).aspx
Set-MobileDeviceMailboxPolicy x 2
https://technet.microsoft.com/en-us/library/jj218719(v=exchg.160).aspx
New-ActiveSyncDeviceAccessRule
https://technet.microsoft.com/en-us/library/dd876923(v=exchg.160).aspx
Just to confirm…for “users who fail to download the security settings defined by the organization must be prevented from accessing their mailbox”
Set-MobileDeviceMailboxPolicy -AllowNonProvisionableDevices
cmdlet above requires a Boolean value, of course…
Users must be required to enter a complex password to unlock their device.
— Example Set-MobileDeviceMailboxPolicy -PasswordEnabled $True -MinPasswordComplexCharacters 4 -MinPasswordLength 8
Users who fail to download the security settings defined by the organization must be prevented from accessing their mailbox.
— Example Set-MobileDeviceMailboxPolicy -AllowNonProvisionableDevices <$true | $false
Only devices that run iOS 8 or later must be allowed to connect to the Exchange Server organization.
— Example New-ActiveSyncDeviceAccessRule -Characteristic DeviceOS -QueryString "iOS 8.* ****" -AccessLevel Block
nice work!
—Set-MobileDeviceMailboxPolicy -AllowSimplePassword $false
I got this question.