Designing a Microsoft Exchange Server 2003 Organization

1. All servers that provide services to Internet users must be located in a perimeter network. Other servers are not permitted in the perimeter networks.
2. The company requires end-to-end encryption when users access their e-mail by using the Internet.
3. All inbound e-mail must be scanned for viruses.
Interviews
Chief Executive Officer:
1. I know that the antivirus software for the Exchange system is purchased on a server-by-server basis.
2. I want to minimize the number of servers on which we must install the software.
3. We need to ensure that the failure of a single Microsoft Outlook Web Access server does not prevent our users from accessing their e-mail when they work from home.
4. We also need to ensure that the failure of any server will only have a minimal impact on the ability of users, in each branch office, to send and receive e-mail while they are in the office.
Messaging Infrastructure
1. All user e-mail messages must be backed up daily.
2. If a failure occurs, as much data as possible must be recovered.
3. However, several mailboxes support customer service operations.
4. Messages sent to these mailboxes do not need to be backed up and they do not need to be recovered if a failure occurs.
5. Users who work from home will access e-mail by using their home Internet connections.
6. They will connect to a Microsoft Outlook Web Access server that is hosted at their local branch office.
7. All Outlook Web Access servers will be configured to require SSL-encrypted connections.
E-Mail Clients
1. Users will use Microsoft Outlook to access e-mail in the new Exchange Server 2003 environment.

Case Woodgrove Bank (6 Questions)
Question 1
1. You need to design a storage strategy that meets all business and technical requirements. What should you do?
A. Create a storage group for each office. Within each storage group, create a single database.
B. Create a storage group for each region. Within each storage group, create a single database.
C. Create a storage group for each region. Within each storage group, create separate databases for each office in that region.
D. Create a single storage group. Within that storage group, create a separate database for each office.
Answer: C
Question 2
You need to design an administrative model that meets all business and technical requirements. What should you do?
A. Place the mailboxes for each region on a separate server. Create an administrative group for each region.
Assign each regional technician Exchange Full Administrator permission over that region's administrative groups.
Assign the main office IT staff Exchange Full Administrator permission over each administrative group.
B. Place the mailboxes for each region on a separate server. Create an administrative group for each region.
Assign each regional technician Exchange Full Administrator permission over all administrative groups.
Assign the main office IT staff Exchange Full Administrator permission over each administrative group.
C. Place the mailboxes from multiple regions on each server. Create an administrative group for each server.
Assign each regional technician Exchange Full Administrator permission over the administrative groups that contain servers that hold mailboxes for that region.
Assign the main office IT staff Exchange Full Administrator permission over each administrative group.
D. Place the mailboxes from multiple regions on each server. Create a single administrative group for all servers.
Assign each regional technician and the main office IT staff Exchange Full Administrator permission over the administrative group.
Answer: A

Question 3
You need to design a strategy for managing the messages that are sent to the customer service mailboxes.
What should you do?
A. Create a separate storage group and database to contain the customer service mailboxes. Enable circular logging for this storage group.
B. Create a separate storage group and database to contain the customer service mailboxes. Set the deleted item retention period for this database to zero.
C. Place the customer service mailboxes on a new mailbox store in the storage group that contains the main office user mailboxes. Enable circular logging for this storage group.
D. Place the customer service mailboxes on a new mailbox store in the storage group that contains the branch office user mailboxes. Set the deleted item retention period for this database to zero.
Answer: A
Question 4
You need to design the Exchange 2003 server configuration for remote e-mail access. What should you do?
A. Configure the front-end servers in each branch office to be members of a new Active Directory site.
B. Configure the back-end servers to have server encryption certificates issued by a commercial certification authority (CA).
C. Configure two back-end servers to be members of a Network Load Balancing cluster. Configure Network Load Balancing for inbound RPC connections.
D. Configure multiple front-end servers in each branch office to be members of a Network Load Balancing cluster. Configure Network Load Balancing for inbound HTTPS connections.
Answer: D

Question 5
You need to design the deployment of antivirus software. What should you do?
A. Install the antivirus software on each mailbox storage server.
B. Install the antivirus software on each Outlook Web Access server.
C. Install the antivirus software on one Outlook Web Access server at each office.
D. Install the antivirus software on a back-end server that contains no mailboxes.
Answer: A

Question 6
You need to design access to e-mail by Internet users. What should you do?
A. Configure front-end servers to use HTTP to communicate with back-end servers.
B. Configure the internal firewall to allow IPSec traffic between front-end and back-end Exchange servers.
C. Require all users to encrypt all outbound e-mail messages.
D. Issue digital certificates to all remote users. Require the certificates to be used when authenticating to Outlook Web Access.
Answer: B

Case 2, Fourth Coffee, Scenario
Overview
Fourth Coffee is an international company that operates 24 hours a day and supplies
coffee to retailers around the world.
Physical Locations
The company has a main office and seven branch offices.
The main office is located in Sydney.
The branch offices are located in
1. Auckland
2. San Paulo
3. Johannesburg
4. London
5. Helsinki
6. Seattle
7. New York
Planned Changes
The company plans to upgrade from Exchange Server 5.5 to Exchange Server 2003.
Administrative Structure
1. The current Exchange Server 5.5 environment contains eight sites. Each office is configured as a separate site.
2. A centralized administrative model is uses in the organization. All the Exchange administration and configuration take place at the main office.
3. Exchange administrators are responsible for the creation of mailboxes and configuration of the Exchange servers. The Exchange administrators do not have Domain Admin rights.
4. Domain administrators are responsible for daily administration and networking tasks.
Messaging Infrastructure
1. The name of the existing Exchange Server 5.5 organization is Fourth Coffee. The organization contains an SMTP address of @fourthcoffee.com.
2. The Exchange Server 5.5 routing topology was created by using X.400 connectors.
3. The main office has two dedicated Internet Mail Connectors that are responsible for sending and receiving e-mail messages from the Internet.
E-Mail Clients
1. Fourth Coffee uses Microsoft Outlook 2002 as its e-mail client.
2. The network currently supports MAPI, HTTP, HTTPS, and SMTP.
Directory Services
1. Fourth Coffee is in the process of migrating to a single-domain forest named fourthcoffeee.com.
2. The functional level of the domain and the forest is Windows Server 2003.
3. On the network, domain controllers are named DC2, DC2, etc., and global catalog servers are named GC1, GC2, etc.
Network Infrastructure
1. The existing network infrastructure is shown in the following diagram.

1. The WAN connection between the Seattle and New York offices is 10 percent utilized.
2. The WAN connection between the Helsinki and London offices is also 10 percent utilized. All the other WAN connections are approximately 65 percent utilized.
3. Because the WAN connection between Johannesburg and the main office is unreliable, VPN exists as a backup between the Johannesburg and Sydney offices. A VPN connection is created over a public network.
Security
1. The company requires that all users use Outlook Web Access or Microsoft Outlook 2003. The company requires remote users to use encryption for remote connections.
Interviews
Chief Executive Officer:
1. Sales personnel need to be able to read and send e-mail mail messages and schedule meetings while they are offline.
2. E-mail messages and meeting requests should be sent automatically when the sales personnel connect to the Exchange servers from remote locations.
Chief Information Officer:
1. Due to competitive pressures, we want to change the name of our Exchange organization but still keep our SMTP namespace.
2. There is no budget for additional migration tools or external consultants.
3. During the migration process, managers must still be able to schedule meetings and view the calendars of other managers.
Exchange Administrator:
1. As part of the design and migration strategy, we want to consolidate the Exchange Server 5.5 servers.
2. We want to be able to migrate mailbox directory information and populate Active Directory with account information.
End User:
1. The public folder server is constantly unavailable.
2. We need to be able to access public folders on a regular basis.
Messaging Infrastructure
1. Two connectors will be used to send and receive e-mail messages from the Internet.
2. The company wants all inbound Internet e-mail messages to flow through EX1. If EX1 is not available, the company wants the e-mail messages to flow through EX3. EX1 and EX3 are located at the main office.
3. The new environment must coexist with the existing Exchange Server 5.5 environment, including the public folders.
4. The company plans to install and configure Exchange Server 2003 on new computers.
5. All SMTP from the Internet for the fourthcoffee.com namespace must be delivered to the Exchange Server 2003 computer.
6. The company plans to use Microsoft Internet Security and Acceleration (ISA) Server, Enterprise Edition, to create a perimeter network. The server will be named ISA1.
Supporting Infrastructure
1. Users need to be able to access the online global address list in the case of a failure of a WAN connection or single server.
2. You must use the minimum number of global catalogs possible to ensure logon and global address list functionality without excessively burdening the network.
3. You also need to minimize the number of DNS lookups for mail deliver and ensure that DNS lookups take place on only the servers in the main office.
4. Shared resources in the existing Microsoft Windows NT domain must be accessible by users in both the new Active Directory domain and the Windows NT domain.
E-mail Client Infrastructure
1. The e-mail clients and desktop computers will be upgraded to use Outlook 2003 exclusively.
2. Client computers that connect to the Outlook Web Access servers use Internet Explorer 5.5 with SP2 or a more recent version.
3. The company wants MAPI, HTTPS, and SMTP to be the only protocols that are supported.

Case 2, Fourth Coffee (6 Questions)
Question 1
You need to design a migration path for migrating user accounts and mailboxes to the new environment.
Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)
A. Use the Migration Wizard to create and migrate mailboxes to Exchange Server 2003.
B. Use Active Directory Users and Computers to move user accounts and mailboxes to the new environment.
C. Use Microsoft Identity Integration Server (MIIS) to synchronize user accounts with the new environment.
D. Use the Active Directory Migration Tool (ADMT) to clone user accounts in Active Directory.
E. Use ClonePrincipal to migrate user accounts to the new environment.
Answer: A D

Question 2
You need to design a migration strategy to migrate public folders from the existing Exchange Server 5.5 environment to the Exchange Server 2003 environment. What should you do?
A. Install and configure the Exmerge utility. Use the utility to migrate and import all calendar information into each new mailbox.
B. Install and configure the InterOrg Replication Utility. Use the utility to migrate public folder information from Exchange Server 5.5 to Exchange Server 2003.
C. Install and configure a public folder connection agreement. Use this agreement to migrate the public folder information from Exchange Server 5.5 to Exchange Server 2003.
D. Run the pfmigrate command to migrate the public folder information from Exchange Server 5.5 to Exchange Server 2003.
Answer: B

Question 3
You need to ensure that SMTP e-mail messages can be delivered when the messages are sent to addresses that end with @fourthcoffee.com and are intended for the Exchange Server 5.5 environment. Which three courses of action should you perform? (Each correct answer presents part of the solution. Choose three.)
A. Create mail-enabled contacts in the fourthcoffee.com domain for each Exchange Server 5.5 recipient. Establish the e-mail address to have an address that ends with @oldmail.fourthcoffee.com.
B. Create mail-enabled contacts in the fourthcoffee.com domain for each Exchange Server 5.5 recipient. Establish the e-mail address to have an address that ends with @fourthcoffee.com.
C. Configure each Exchange Server 5.5 recipient to have an additional e-mail address that ends with @oldmail.fourthcoffee.com. Set the @oldmail.fourthcoffee.com address to be the default reply address.
D. Configure each Exchange Server 5.5 recipient to have an additional e-mail address that ends with @oldmail.fourthcoffee.com. Set the @fourthcoffee.com address to be the default reply address.
E. Configure each Exchange Server 5.5 recipient to use a single SMTP address that ends with @oldmail.fourthcoffee.com.
F. Configure an SMTP connector between the Exchange Server 2003 routing group at the Sydney office and the Exchange Server 5.5 site at the Sydney office. Configure the connector namespace to be oldmail.fourthcoffee.com.
G. Configure an SMTP connector between the Exchange Server 2003 routing group at the Sydney office and the Exchange Server 5.5 site at the Sydney office. Configure the connector namespace to be fourthcoffee.com.
Answer: A D F

Question 4
You need to configure the DNS server to allow delivery of e-mail messages. Which four actions should you perform? (Each correct answer presents part of the solution. Choose four.)
A. Create a host (A) resource record for EX1.fourthcoffee.com on the internal DNS Server.
B. Create a host (A) resource record for EX1.fourthcoffee.com on the external DNS Server.
C. Create a host (A) resource record for EX3.fourthcoffee.com on the internal DNS Server.
D. Create a host (A) resource record for EX3.fourthcoffee.com on the external DNS Server.
E.Create a mail exchanger (MX) resource record for EX1.fourthcoffee.com on the external DNS server. Set the preference to 10.
F. Create a mail exchanger (MX) resource record for EX1.fourthcoffee.com on the internal DNS server. Set the preference to 10.
G. Create a mail exchanger (MX) resource record for EX3.fourthcoffee.com on the external DNS server. Set the preference to 20.
H. Create a mail exchanger (MX) resource record for EX3.fourthcoffee.com on the internal DNS server. Set the preference to 20.
Answer: B D E G

Question 5
You need to design a migration strategy to migrate the Exchange Server 5.5 mailboxes. What should you do?
A. Create and configure a one-way recipient connection agreement from Active Directory to Exchange Server 5.5.
B. Create and configure a configuration connection agreement between Exchange Server 5.5 and Active Directory.
C. Create and configure an inter-organizational recipient connection agreement from Exchange Server 5.5 to Active Directory.
D. Create and configure a two-way recipient connection agreement between Exchange Server 5.5 to Active Directory.
E. Use Microsoft Identity Integration Server (MIIS) to synchronize objects between Exchange Server 5.5 and Active Directory.
Answer: C

Question 6
You need to minimize the amount of bandwidth that users use to access public folders. Which routing groups should you create?
To answer, select the appropriate set of routing groups in the answer area.
Answer:

Case 3, Lucerne Publishing, Scenario
Overview
Lucerne Publishing employs staff writers, editors, and production specialists, as well as contract writers.
The company provides messaging services to employees 24 hours a day, seven days a week.
Physical Locations
The main office includes 2,500 users. A total of 50 users work from the remote locations and connect to the company resources by using various ISPs.
Planned Changes
The company currently uses an outsourced e-mail service and is implementing Exchange Server 2003 to replace that service. E-mail messages from the service will not be migrated to Exchange.
The existing messaging infrastructure is outsourced.

Directory Services
1. The company network consists of a single Active Directory domain.
2. All users have accounts in the Active Directory domain.
Administrative Structure
1. The company has a central Information Technology (IT) staff at the main office.
2. One group of administrators is in the Default Domain Admins group and is responsible for all Active Directory administration.
3. Another group of administrators is in a domain user group named Server Admins and is responsible for managing server and client hardware, operating systems, and applications.
Network Infrastructure
1. The main office has a high-speed connection to the Internet.
2. The main office network includes a perimeter network that connects the internal network to the Internet.
3. The network configuration of the main office is shown in the following diagram.

Security
1. All users must be able to send digitally signed messages no matter how they are accessing their e-mail
2. E-mail servers must be protected from external threats; however, requirements for configuring the firewalls must be minimized.
3. Members of the Server Admins group must not be required to have administrative permissions in Active Directory. However, they must be able to back up operating system files and shut down the operating system on Exchange Server 2003 computers.
Interviews
Chief Executive Officer:
1. We must have the most up-to-date and accurate backups of our e-mail.
2. We want to minimize the impact of this requirement on Exchange performance.
3. We want to use Windows-compatible backup software.
4. All non-executive mailboxes must have a size limit of 250 MB.
5. This limit must be the default for new mailboxes so that configuration management is minimized.
6. However, executive mailboxes must have a size limit of 500 MB.
7. This limit can be applied after the mailbox is created.
8. We also need to create the simplest possible storage configuration on the Exchange servers.
Chief Information Officer:
1. We plan to have one or more Exchange servers running Microsoft Outlook Web Access.
2. For both internal and remote users, we must minimize the impact of a single hardware failure in the messaging system.
3. However, we want to minimize the number of total servers used to run Exchange.
4. We want no more than 1,500 mailboxes on a single Exchange mailbox server.
Messaging Infrastructure
1. The company will deploy Exchange Server 2003 as the new messaging platform.
Supporting Infrastructure
1. Network traffic between the Exchange servers must be minimized
E-mail Client Infrastructure
1. All client computers at the main office run Microsoft Outlook 2003.
2. The company will run Outlook Web Access to give remote users access to e-mail.
3. Remote users will use Internet Explorer 6.0 or later to access e-mail.
Network Infrastructure

Case 3, Lucerne Publishing (7 Questions)
Question 1
You need to design a configuration for the mailbox servers. What should you do?
A. Create two Exchange Server 2003 computers. Place the mailboxes for main office users on one server, and place the mailboxes for remote users on the other server.
B. Create a Network Load Balancing cluster that contains two Exchange Server 2003 computers. Place half of the user mailboxes on one server, and place half of the user mailboxes on the other server.
C. Create a Microsoft Cluster Server cluster that contains two Exchange Server 2003 computers. Place all of the user mailboxes on one server, and configure the other server as a failover node.
D. Create a Microsoft Cluster Server cluster that contains two Exchange Server 2003 computers. Place half of the user mailboxes on one server, and place half of the user mailboxes on the other server.
Answer: D

Question 2
You need to design a configuration for Exchange Server storage that meets the business and technical requirements. What should you do?
A. Create a single storage group. Create one database for all users.
B. Create two storage groups. In each storage group, create one database. Place mailboxes for remote users in one storage group database, and place all other mailboxes in the other storage group database.
C. Create two storage groups. In each storage group, create one database. Place executive mailboxes in one storage group database, and place all other mailboxes in the other storage group database.
D. Create two storage groups. In one storage group, create a database, and place all mailboxes for remote users and executives in the database. In the other storage group, create a database for all other mailboxes.
Answer: A

Question 3
You need to design a configuration for the Microsoft Outlook Web Access servers. What should you do?
A. Create a Network Load Balancing cluster that contains the Outlook Web Access servers.
B. Create a Microsoft Cluster Server cluster that contains the Outlook Web Access servers.
C. Create public DNS host (A) resource records for each Outlook Web Access server. Instruct each user to connect to the server that contains his or her mailbox.
D. Install Microsoft Application Center 2000 on the Outlook Web Access servers. Create a Web cluster that contains all of the Outlook Web Access servers.
Answer: A

Question 4
You need to design the network locations for the mailbox servers and Outlook Web Access servers. What should you do?
To answer, drag the appropriate server or servers to the correct location or locations in the answer area.

Answer:

Question 5
You need to design access to Microsoft Outlook Web Access for remote users. What should you do?
A. Place all user mailboxes on back-end servers. Deploy Outlook Web Access on three front-end servers that are members of a Network Load Balancing cluster.
B. Place all user mailboxes on back-end servers that are members of a Network Load Balancing cluster. Deploy Outlook Web Access on the back-end servers.
C. Place mailboxes for remote users on one back-end server, and place mailboxes for main office users on another back-end server. Deploy Outlook Web Access on the back-end server that contains the mailboxes for remote users.
D. Place all user mailboxes on two back-end servers that are members of a Network Load Balancing cluster. Place mailboxes for remote users and mailboxes for main office users into separate storage groups. Deploy Outlook Web Access on three front-end servers. Configure the front-end servers to access only the back-end Network Load Balancing cluster.
Answer: A

Question 6
You need to design a security strategy for remote e-mail access. What should you do?
A. Require remote users to access e-mail by using Outlook Mobile Access.
B. Require Outlook Web Access users to install the secure MIME ActiveX control and to encrypt all messages.
C. On Outlook Web Access servers that accept connections from the Internet, configure IIS to require SSL for all connections.
D. On Outlook Web Access servers that accept connections from the Internet, configure IIS to require integrated Windows authentication.
Answer: C

Question 7
You need to design an administrative model that meets the business and technical requirements. What should you do?
A. Assign permissions to manage mailboxes and Exchange Server configuration to the Server Admins group.
B. Assign permissions to manage mailboxes and Exchange Server configuration to the Domain Admins group.
C. Assign permissions to manage mailboxes to the Server Admins group. Assign permissions to manage Exchange Server configuration to the Domain Admins group.
D. Assign permissions to manage mailboxes to the Domain Admins group. Assign permissions to manage Exchange Server configuration to the Server Admins group.
Answer: D

Case 4, City Power & Light
Overview
City Power & Light is a utilities company that operates throughout the United States.
Physical Locations
The main office for City Power & Light is located in Chicago.
Other offices are
1. 5 Branch offices,
2. 200 Retail outlets,
3. 1 Subsidiary location.
The company locations and WAN connections are shown in the following diagram.

The number of users in each location is shown in the following table.

Planned Changes
1. City Power & Light uses Exchange Server 5.5 computers for all of its messaging
services.
2. The company plans to upgrade to Exchange Server 2003.
3. The subsidiary also uses Exchange 5.5 servers in a separate organization.
4. The subsidiary will be closed over the next year, and all users will be moved to one of
the existing company locations.
Problem Statements
Information Technology (IT)
1. Administration at City Power & Light is decentralized.
2. A primary goal is to centralized IT administration.
Administrative Structure
1. Each branch office has at least one user who is a member of the Domain Admins group.
2. In total, there are about 75 users in the Domain Admins group, which has full control
of the Exchange organization.
Messaging Infrastructure
The existing Exchange 5.5 site configuration is shown in the following diagram.

1. The main office contains three Exchange 5.5 servers.
2. One of the main office servers is a bridgehead server that is dedicated for connections to the Internet and the other sites.
3. The other two servers at the main office are mailbox servers.
4. Each branch office contains one Exchange 5.5 server.
5. City Power & Lights uses public folders extensively.
6. The public folder hierarchy is complicated, and permissions are assigned by using individual mailboxes and distributed lists throughout the public folder tree.
7. All public folders are replicated to each Exchange server in each office.
8. The company is trying to eliminate the practice of using individual mailboxes for public folder permissions.
9. At least 100 distribution lists have been created just to manage permissions on the public folders.
10. The distribution lists include members from multiple domains.
E-mail Clients
1. All users at the main office and branch offices use either Outlook 2000 or Outlook 2003.
2. Users at the retail outlets use Microsoft Outlook Express configured with POP3 accounts.
3. The users connect to the Exchange server located in the nearest branch office.
Directory Services
City Power & Light has completed the migration to Microsoft Windows Server 2003 Active Directory.
The Active Directory domain configuration is shown in the following diagram.

1. The Corp domain is running at Windows Server 2003 functional level.
2. The MO and Field domains were created by upgrading Windows NT 4.0 domains to Windows Server 2003 Active Directory.
3. Both domains still contain Windows NT 4.0 backup domain controllers.
4. The subsidiary runs a single Windows NT 4.0 domain.
Network Infrastructure
1. The company recently upgraded the WAN connections between company locations.
2. No additional WAN upgrades are planned.
Administration
1. Each time the domain controllers and Exchange servers are removed from the branch offices, the company needs to remove the branch office administrators from the domain-level administration groups.
Security
1. The company is concerned about users at the retail outlets accessing their e-mail messages across the Internet.
2. The client connection to the mailbox servers must be encrypted from the client computers to the mailbox server that hosts each user's mailbox.
3. The company has a perimeter network for all servers that are accessed from the Internet.
Interviews
Chief Information Officer:
1. We need to reduce the number of Exchange servers as much as possible.
2. By the end of the project, we must have only Exchange 2003 servers deployed.
3. The exception is the subsidiary. We are phasing out the Exchange 5.5 server over the next year.
4. We also have a long-term strategy to eliminate the Field.Corp.cpandl.com domain.
5. Although we will not be able to do this for a while, your implementation efforts should support that long-term strategy
Network Administrator:
1. We want to reduce the number of users in the Domain Admins group to fewer than five.
2. We also need to restrict who can manage the Exchange 2003 servers.
3. We want only the Domain Admins group and a Messaging Admins group to manageall the Exchange servers.
4. The Messaging Admins group should be able to administer the Exchange organization, but it should not be able to assign anyone else permission to manage the servers.
5. In addition, we want one administrator in each office that contains an Exchange server to be able to create mailboxes on the Exchange server in that office.
6. The administrator should not be able to modify any Exchange settings and should not be able to create mailboxes on an Exchange server in any other office.
7. We also want to configure some policies - suck as an IPSec polices - on the Exchange servers without affecting other servers in the environment.
8. The Windows NT backup domain controllers are running old applications.
9. We cannot remove these servers as part of the project.
Messaging Administrator:
1. We want to delegate the task of moving user mailboxes to the group that administers Active Directory user accounts.
2. They are trained on how to sue the Active Directory administration tools, but they should not use any Exchange administration tools.
Project Manager:
1. We will be cleaning up the subsidiary location over the next year.
2. We will be moving a few users each week to existing company locations.
3. We want the subsidiary user accounts to be displayed in our global address list (GAL) before and after the users move.
4. We also want the corporate user accounts to be displayed in the GAL at the subsidiary.
5. We want to make sure that no changes are made either to GAL by synchronization process until after an administrator reviews the changes.
Messaging Infrastructure
1. All e-mail messages that are sent between the main office and the subsidiary must cross the WAN connection between the company locations.
2. All Internet e-mail messages sent to or from the subsidiary location need to use the existing Internet Mail Service connector at the subsidiary.
Supporting Infrastructure
1. The network configuration for the retail outlets will change.
2. The business application used by the retail outlets has been converged into a Web application.
3. The retail outlets need only an Internet connection to access the application.
4. As a result, all WAN connections to the retail outlets are being replaced with an Internet connection.
E-mail Client Infrastructure
1. The users at the retail outlets need to be able to access their mailboxes, public folders and calendars when they are in the office.
2. They do not need to be able to access their e-mail when the Internet connection is down.
3. The retail offices do not have local network administrators, and therefore the client configuration for the retail offices needs to be as simple as possible.
4. All mailboxes for users in the retail outlets will be centralized on one of the Exchange 2003 servers at the main office.
5. The company us undecided on which Exchange servers will be replaced in the branch office.
6. The company is prepared to accept a decrease in e-mail client performance for users in the branch offices, when the Exchange servers are removed.
7. The company had decided that Exchange 5.5 server will be replaced with an Exchange 2003 server in offices where they are more than 30 mailboxes in the office or the WAN connection to the main office is 640 Kbps or less.

Case 4, City Power & Light (6 Questions)
Question 1
You need to design a routing group configuration for the Exchange organization. Which offices should you configure to have a routing group?
To answer, drag a routing group to the correct location or locations in the answer area.
Drag routing group here Routing Group Routing group Answer Area Main office
Answer:

Question 2
You need to create an administrative design that will enable the organization to centralize the management of the Exchange Server 2003 computers. Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)
A. Create a new domain named Exchange.Corp.cpandl.com and locate all the Exchange servers in the domain.
B. Create a new organizational unit (OU) named Exchange OU and move all the Exchange servers into the OU.
C. Create a new organizational unit (OU) for each office that contains an Exchange server. Locate the Exchange server in that office in this OU.
D.Assign Full Exchange Administrator rights to the Domain Admins group and to the Exchange Admins group at the organization level. Assign View Only Exchange Administrator rights to the administrator in each office at the appropriate administrative group level.
E. Assign Full Exchange Administrator rights to the Domain Admins group. Assign Exchange Administrator rights to the Exchange Admins group. Assign View Only Exchange Administrator rights to the administrator in each office at the appropriate administrative group level.
F. Assign Full Exchange Administrator rights to the Domain Admins group. Add the Exchange Admins group to the Administrators group on each Exchange server. Assign the administrator in each office to the Administrators group on each Exchange server.
Answer: B E

Question 3
You need to design a strategy for migrating the mailboxes from Exchange Server 5.5 to Exchange Server 2003. What should you do?
A. Use the Exchange Task Wizard to migrate all the mailboxes to the Exchange 2003 servers.
B. Use the Exchange Mailbox Merge Wizard (Exmerge) to migrate all the mailboxes to the Exchange 2003 servers.
C. Use the Exchange Server Migration Wizard to migrate all the mailboxes to the Exchange 2003 servers.
D. Export the contents of each mailbox to a .pst file. Create a new mailbox on the Exchange 2003 servers for each existing mailbox. Import the .pst file contents into each new mailbox.
Answer: A

Question 4
You need to design a solution so that users in the retail outlets can access their e-mail on the Exchange 2003 servers. What should you do?
A. Install an Exchange 2003 server infrastructure that will support POP3 connections from the Internet. Install a user certificate on each client computer at the retail outlets. Instruct the users to sign and encrypt all outbound e-mail messages.
B. Install an Exchange 2003 server infrastructure that will support encrypted POP3 connections from the Internet. Configure the client computers in the retail outlets to use an encrypted connection to the POP3 server.
C. Install an Exchange 2003 server infrastructure that will support encrypted Microsoft Outlook Web Access connections from the Internet. Instruct all users at the retail outlets to access their e-mail by using Microsoft Internet Explorer 5.5 or later to connect to the secure Microsoft Outlook Web Access server.
D. Install an Exchange 2003 server infrastructure that will support encrypted IMAP4 connections from the Internet. Configure the client computers in the retail outlets to use an encrypted connection to the IMAP4 server.
Answer: C
Question 5
In preparation for migrating mailboxes and public folders to Exchange Server 2003, you need to create a design for replicating the mailboxes, custom recipients, and distribution lists (DLs) from the Exchange Server 5.5 Field sites to Active Directory. What should you do?
To answer, drag the appropriate Exchange 5.5 object or objects to the correct location or locations in the answer area.
Answer:

Question 6
You need to design a connection agreement for Active Directory Connector to synchronize directory information with the subsidiary location. Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)
A. Configure a one-way connection agreement that replicates from the subsidiary's Exchange 5.5 organization to Active Directory.
B. Configure a one-way connection agreement that replicates from Active Directory to the subsidiary's Exchange 5.5 organization.
C. Configure two one-way connection agreements that replicate between the subsidiary's Exchange 5.5 organization and Active Directory.
D. Configure the connection agreement to replicate all objects.
E. Configure the connection agreement to replicate only mailboxes.
F. Configure the connection agreement to save deletions in an LDAP Data Interchange Format file.
Answer: A E

Case 5, Northwind Traders
Case Time until final review 20 minutes
Background
Overview
Northwind Traders imports various kinds of merchandise from around the world.
They require its messaging system to be available Monday through Friday from 9:00
A.M. to 5:00 P.M. local time.
E-mail is the primary means of communication between company employees and
overseas vendors.
Physical Locations
The company has offices in New York and Los Angeles.
The New York office has 400 users + 50 (18 months)
Los Angeles office has 150 users.
A total of 50 New York users also work from home and access e-mail by using a Web
interface.
Planed Changes
The company currently uses a POP3 messaging system.
This system will be replaced with Exchange Server 2003.
Messages will not be migrated from the old system to Exchange.
The company will deploy Microsoft Outlook Web Access so that employees working
from home can access e-mail.
In 18 months, the company will purchase a subsidiary, which will add 50 users to the
New York office.
All of these users will access e-mail by using Outlook Web Access.
Existing Messaging Environment
Administrative Structure
1. Server administrators at each office create and manage the mailboxes on the POP3 messaging system.
Messaging Infrastructure
1. The company has a third-party certification authority (CA) deployed on the network.
2. The CA is integrated with Active Directory.
E-mail Clients
1. All office users run Microsoft Outlook 2003 and Internet Explorer 6.0 on their client computers.
2. Home users run Microsoft Internet Explorer 6.0 or later.
Supporting Infrastructure
Directory Services
1. The company has a single Active Directory domain with two sites.
2. Each site contains two domain controllers.
3. One domain controller at the New York office is configured to be a global catalog server.
4. There are no other global catalog servers.
Network Infrastructure
1. Each office has a dedicated 1.544-Mbps connection to the Internet.
2. The offices are connected to each other by a dedicated 3-Mbps connection.
3. This connection is less than 20 percent utilized.
4. Each office has a perimeter network that connects it to the Internet.
Administration
1. A central IT administration group works at the New York office this group is responsible
2. 1. Active Directory administration and has administrative permissions on all company servers
2. Hardware maintenance for Exchange servers.
3. Each office also has a server administration group that has administrative permissions on all servers in that office.
Business requirements
Security
1. All connections to Outlook Web Access must be encrypted.
2. Server administrators in each office must be able to manage the Exchange servers, including performing backup and recovery operations, without having permissions to create or modify user and group objects in Active Directory.
3. Server administrators from each office must be able to manage all Exchange servers in the company.
Interviews
Chief Executive Officer:
1. If a mailbox store fails, we must not lose more than one hour of data.
2. If a single store fails because of file corruption or other database-related reasons, no more then 150 users must be affected.
3. I am told that we have about 3 GB of nightly backup capacity, so our backup and recovery strategy must work within that limitation.
4. Additionally, we must simplify our backup strategy as much as possible.
5. In the past, our competition has sent forged e-mail messages to our vendors so that the messages appeared to be coming from us.
6. The new messaging system must allow us to ensure that messages to our vendors are identifiable as coming from us.
7. However, we cannot afford to spend additional money on these security measures.
Chief Information Officer:
1. Corporate security polices prohibit domain communications, including logon and password change traffic, from passing through any firewall on our network.
2. We also need to minimize the address book traffic that the Exchange system creates on our WAN connection.
3. We need to minimize the number of new servers we purchase for Exchange, and we need to minimize the number of global catalog servers on the network.
Technical Requirements
E-mail Client Infrastructure
1. All company vendors use Microsoft Outlook 2000 or later for e-mail.
2. Company policies state that all e-mail users will be limited to 100 MB of mailbox storage space.
3. The company wants to build the Exchange system so that future hardware purchases that are necessary to provide e-mail to the subsidiary users are minimized.
4. The servers that the company is purchasing for Exchange have adequate disk space to accommodate the subsidiary users.

Case 5, Northwind Traders (4 Questions)
Question 1
You need to design an administrative model for the Exchange Server environment. What should you do?
A. Create a single organizational unit (OU). Place the user accounts for each office into the OU. Delegate control over the OU to the office's server administrators and the central IT staff.
B. Create a single Exchange administrative group. Place all Exchange servers into that administrative group. Assign permissions for the administrative group to the office's server administrators and the central IT staff.
C. Create an Exchange administrative group for each office. Place the Exchange servers for each office into that office's administrative group. Assign permissions for the administrative group to the office's server administrators. Allow the central IT staff to manage user mailboxes.
D. Create an organizational unit (OU) for each office. Place the user accounts for each office into the appropriate OU. Delegate control over each OU to the office's server administrators. Allow the central IT staff to manage user mailboxes.
Answer: B

Question 2
Y You need to design a strategy for providing e-mail access to the subsidiary users. What should you do?
A. Deploy POP3 and IMAP4 services on Exchange front-end servers. Make the front-end servers accessible from the Internet by means of POP3, IMAP4, and SMTP only.
B. Deploy Microsoft Outlook Web Access on Exchange mailbox servers. Make the mailbox servers accessible from the Internet by means of HTTPS and SMTP only.
C. Deploy Microsoft Outlook Web Access on Exchange front-end servers. Make the front-end servers accessible from the Internet by means of HTTPS only.
D. Deploy an additional Exchange mailbox server that contains all subsidiary mailboxes. Deploy Microsoft Outlook Web Access on the server. Make the server accessible from the Internet by means of HTTPS only.
Answer: C

Question 3
You need to design security for messages exchanged between Northwind Traders employees and its vendors. What should you do?
A. Require employees to access e-mail only over connections that use SSL.
B. Place Exchange mailbox stores on NTFS volumes. Use Encrypting File System (EFS) to encrypt the stores.
C. Use the internal certification authority (CA) to issue certificates to all employees. Require employees to digitally sign outbound e-mail.
D.Use the internal certification authority (CA) to issue certificates to all employees and vendors. Instruct employees and vendors to use secure MIME to encrypt all e-mail sent between them.
Answer: C

Question 4
You need to designate which domain controllers will be global catalog servers in the new environment. What should you do?
To answer, drag the domain controller role to the correct location or locations in the answer area.
Answer:

Case 6, TestInside .com, Scenario
Overview
TestInside .com is a large retail company that has 2,000 locations all across North America
and South America and 10,000 employees.
Physical Locations
The main office is in Washington DC.
Branch offices are in Mexico City, Buenos Aires, and Rio de Janeiro.
The main office and each branch office connect to satellite offices in the same country.
The locations of offices and the number of users in each office are shown in the following table.

Planned Changes
TestInside .com plans to migrate the current Exchange 2000 Server messaging
environment to Exchange Server 2003.
Existing Messaging Environment
Administrative Structure
1. The administrative groups for TestInside .com are shown in the following diagram.

Messaging Infrastructure
1. All Exchange servers run Exchange 2000 Server with the most recent service pack.
2. The operating system on each Exchange server is Microsoft Windows 2000 Server with the most recent service pack.
3. The only link between users at TestInside .com and Tailspin Toys is the Lotus CC: Mail Connector.
4. All mail-enabled user accounts have an Internet SMTP alias that complies with the following format: username@ TestInside .com.
5. The serves are used as shown the following table.

1. You plan to purchase two additional servers for the Washington DC office after the upgrade.
2. You plan to name these servers TestInside 10 and TestInside 11.
3. You plan to install Windows Server 2003 and Exchange Server 2003 on these servers and configure them in the future as needed.
E-mail Clients
1. All users who work in the main office or in a branch office connect to their mailboxes and public folders by using Microsoft Outlook 2000.
2. All users who work in a satellite office connect to their mailboxes and public folders over a virtual private network (VPN) connection on the Internet by using an IMAP4 client of their own choosing. Not all e-mail clients support IMAP4 referrals.
3. Users at Tailspin Toys use Lotus CC: Mail to retrieve and send their e-mail messages.
Supporting Infrastructure
Directory Services
The Active Directory infrastructure is shown in the following diagram.

1. The main office and its associated satellite offices are configured as a single site, and each branch office and its associated satellite offices are configured as a separate site.
2. The app. TestInside .com domain was created to support a third-party application. There are no user accounts in this domain.
Network Infrastructure
The placement of global catalog servers is shown the following diagram.

1. The main office in Washington DC and the branch offices in Buenos Aires and Rio de Janeiro each have an independent connection to the Internet by using a local ISP.
2. Each of these locations is configured to accept VPN client connections.
3. Two Windows Server 2003 member servers named DNS1 and DNS2 are located in the main office and are configured as DNS servers for the external zone named TestInside .com.
4. The routing costs for all WAN connections are set to the same value.
Business Requirements
1. The company needs to take advantage of new features in Exchange Server 2003. You must implement these new features for the largest number of users in the shortest time.
2. Messages that have large attachments must be scheduled to be transferred between branch or satellite offices and the main office during off-peak hours only.
3. You must not change the method that users in satellite offices use to access their messages after upgrade. Insufficient resources are available to train these users to use a new e-mail client or connection method.
4. An analysis of home use indicates that users in Mexico do not access the network from home as often as users in the outer countries.
5. No more than one server can be upgraded on any single day.
Technical Requirements
Messaging Infrastructure
1. You must maintain connectivity to existing messaging systems and for the Tailspin Toys users.
2. You must ensure that users in the satellite offices in Mexico are able to access public folders on the servers in the Mexico City office when they attempt to browse public folder content.
3. You must not add any additional hardware until the upgrade is complete.
Supporting Infrastructure
1. During the upgrade procedure, you must not change the existing domain structure.
2. You must not change the existing administrative model.
3. You need to ensure that messaging traffic over connections that are slower than T1 take place only when there are disruptions to the T1 connections.
4. You need to ensure that incoming Internet SMTP traffic is load-balanced across SMTP
servers.

Case 6, TestInside .com, (6 Questions)
Question 1
You need to configure the DNS resource records for incoming e-mail messages from the Internet. What should you do?
A. Configure mailbox (MB) resource records in the external DNS domain. Configure each record so that it has the same refresh interval.
B. Configure mailbox (MB) resource records in the external DNS domain. Configure each record so that it has the same default Time to Live (TTL) interval.
C. Configure mail exchanger (MX) resource records in the external DNS domain. Configure each record to have the same preference and a different mail exchanger.
D. Configure mail exchanger (MX) resource records in the external DNS domain. Configure each record to have the same preference and the same mail exchanger.
Answer: C
Question 2
You need to configure connectors between each routing group. What are two possible ways to achieve this goal? (Each correct answer presents a complete solution. Choose two.)
A.Create and configure SMTP connectors between the routing groups. Do not create additional connectors between the routing groups.
B. Create and configure routing group connectors between the routing groups. Do not create additional connectors between routing groups.
C. Create and configure low-cost routing group connectors and high-cost SMTP connectors between the routing groups.
D. Create and configure high-cost routing group connectors and low-cost SMTP connectors between the routing groups.
Answer: A B

Question 3
You are preparing the supporting network infrastructure for the upgrade to Exchange Server 2003. You want to accomplish this upgrade by using the minimum amount of administrative effort. Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)
A. Run the setup.exe /domainprep command on a domain controller in the prod.adventure-works.com domain.
B. Run the setup.exe /domainprep command on a domain controller in the app.adventure-works.com domain.
C. Run the setup.exe /domainprep command on a domain controller in the adventure-works.com domain.
D. Log on to the domain by using a user account that is a member of the Domain Admins group.
E. Log on to the domain by using a user account that is a member of the Schema Admins group.
Answer: A D

Question 4
You need to upgrade the Exchange servers in the main office while meeting the company's goals and constraints. Which server or servers should you upgrade?
To answer, select the appropriate server, servers, or group of servers in the answer area.
Answer Area:

Answer: 
Choose the EX1 and EX6

Question 5
You need to upgrade the Exchange servers in the London, Rome, and Paris branch offices. In which order should you upgrade the servers?
To answer, move the appropriate server names from the list of server names to the answer area and arrange them in the correct order. (Use only server names that apply.)

Answer:

Question 6
You design a routing topology as shown in the answer area. You need to assign a cost to each connector. How should you configure the connector costs?
To answer, drag the appropriate costs to the correct locations in the answer area.

Answer

Case 7, Coho Vineyard
Time Case until final review 40 minutes
Over view
Coho Vineyard is an international winery and wine distribution company.
Physical locations
Coho Vineyard has vineyards in France, Italy, and Australia. The main office is located
in Paris, and the branch offices are located in Paris, Rome, and Sydney. Coho Vineyard
has recently purchased a subsidiary location that manufactures oak barrels. This
subsidiary is located just outside Paris.
The number of users in each location is shown in the following table.

Planned Changes
Coho Vineyard is migrating from Exchange 2000 Serve to Exchange Server 2003.
Problem Statements
The Mobile users at Coho Vineyard need enhanced functionality without compromising security.
The subsidiary location needs to be integrated with the Coho Vineyard infrastructure.
Administrative structure
The administration of the domain and the Exchange organization are configured as shown in thefollowing table.

All Windows security groups are located in the main office organizational unit (OU).
Messaging infrastructure
1. There is one Exchange 2000 back-end server in the main office and one in each of the branch offices.
2. Each office is configured as a separate routing group and administrative group.
3. All routing groups are connected with Routing Group connectors.
4. All of the Exchange 2000 servers run on hardware that is on the hardware compatibility list for Windows 2000 Server and Windows Server 2003.
5. The Exchange organization at the subsidiary includes a single administrative group in a different Exchange organization.
6. The new subsidiary location has a single Exchange 2000 server.
7. 1. The subsidiary location has a 56-Kbps dial-up connection to the Internet.
2. The Exchange server uses this connection for sending and receiving Internet e-mail messages.
3. Coho Vineyard has deployed an Exchange 2000 front-end server at the main office that is configured to support all the required Internet protocols.
4. All users who connect to Exchange from the Internet connect to the front-end server.
5. Coho Vineyard plans to upgrade the Exchange 2000 organization to Exchange 2003.
Coho Vineyard does not plan to upgrade the Exchange 2000 server at the subsidiary location.
6. The dial-up connection at the subsidiary location is being modified to dial in to a server running Routing and Remote Access Server at the Paris main office.
7. Message routing needs to be modified so that all of the Internet e-mail messages to and from the subsidiary pass through the Paris main office.
8. 1. This connection needs to be as secure as possible.
2. The Exchange server needs to be removed from the Paris branch office. All of the mailboxes on the server need to be relocated to another Exchange served at the main office.
E-mail Clients
1. Users at the main office and in the branch offices use Microsoft Outlook 2000.
2. The sales personnel travel throughout the world. Each salesperson carries a company portable computer.
3. Sales personnel and users at vineyard locations use Microsoft Outlook Web Access.
4. The mailboxes for all Outlook Web Access users are located on the Exchange server at the main office. All users run Microsoft Internet Explorer 5.0 or later.
Directory Services
Coho Vineyard has deployed a single Windows Server 2003 Active Directory domain named cohovineyard.com.
The active Directory configuration is shown in the following diagram.

Each branch office contains a single Windows 2000 Server domain controller that is configured as a global catalog server.
1. The main office contains two Window Server 2003 domain controllers.
2. 1. Both of these domain controllers are configured as global catalog servers.
2. The domain functional level is set to Windows 2000 native.
Network Infrastructure
1. The WAN connections have been upgraded recently, and no new upgrades are planned.
2. The company locations and WAN connections are shown in the following diagram.
Supporting Infrastructure
Only the MOAdmins group should be able to modify the routing configuration for the Exchange organization.
The branch office administrators should be able to administer all users, groups, and computers-including Exchange servers-in their respective offices.
The branch office administrators must not be able to grant themselves additional the main office.
E-mail Client Infrastructure
1. All of the users at the vineyard locations will continue to use Outlook Web Access to access the Exchange servers.
2. The company has not decided which e-mail client they will deploy on the portable computers that are used by the sales personnel.
3. Many of the sales personnel need to be able to read and respond to e-mail and schedule meetings when they are not connected to the Internet.
4. Their massages should be delivered automatically when they connect to the Exchange servers.
Network Topology Exhibit

Security
1. The Exchange 2000 front-end server needs to be upgraded to Exchange 2003 without modifying the way client computers connect to Exchange or the way Internet e-mail is delivered.
2. All client computer connections from the Internet must be as secure as possible.
Interviews
Chief Information Officer:
1. We recently bought a new application that we will use to track our wine production.
2. This application is messaging based. It uses several public folders on the Exchange servers to store information.
3. All of the users at the vineyard locations, as well as about 20 users in each branch office, must have access to the application.
4. We need to be able to back up and restore the data used by this application separately from our regular public folders.
5. Our sales personnel are critical to our continued growth.
6. We need to do whatever we can to make them as efficient as possible.
IT Manager:
1. Our IT administrators at the main office are very busy.
2. Ideally we need to make sure that we do not add too much to their workload during the implementation of Exchange 2003.
3. We need to assign as much work as possible to lower level administrators like the MOUserAdmins group.
4. This group of users is not as skilled as our IT administrators, but they do a great job if they are given a procedure and they use familiar tools.
5. We also need to minimize the growth of the Exchange databases during the migration.
Exchange Administrator:
1. Existing hardware can support up to 2,500 mailboxes per server.
2. We have about 20 public folders in active uses in the company.
3. All 20 public folders are replicated to all the Exchange servers in the company.
4. There are two additional public folders named Sales Data and production Data.
5. Both folders are updated two or three times a week.
6. These updates are about 5 MB in size.
7. At least 20 uses in each office access the reports in the Sales Data folder every day.
8. The Production Data folder is accessed primarily by users at the main office.
9. Users from the other offices do not access this folder more than once every two weeks.
10. The only replica of both public folders in on the Exchange server at the main office.
Network Administrator:
You need to make sure that you do not create additional network traffic across any of the network connections outside Paris. If possible, you should decrease e-mail related traffic.
Server Administrator:
1. All of our Exchange servers are running Windows 2000 Advanced Server with the latest service packs.
2. Our server management policy states that we do not upgrade from one version of Windows to another.
3. If we need to install Windows Server 2003 on any computers, we will buy new hardware and install a clear version of Windows Server 2003.
Case 7, Coho Vineyard (5 Questions)
Question 1
You need to design a public folder strategy for the Sales Data and Production Data public folders. What should you do?
To answer, drag the appropriate option or options to the correct location or locations in the answer area.

Answer:

Question 2
You need to design a solution for deploying the custom wine production application. Your solution must make as few configuration changes as possible. Which three actions should you perform? (Each correct answer presents part of the solution. Choose three.)
A. Create a new public folder named ProdData in the default public folder tree on the Exchange back-end server at the main office.
B. Create a general purpose public folder tree named ProdData on the Exchange back-end server at the main office.
C. Configure an additional IMAP4 virtual server on the Exchange front-end server at the main office. Associate the IMAP4 virtual server with ProdData.
D. Configure an additional IMAP4 virtual server on the Exchange back-end server at the main office. Associate the IMAP4 virtual server with ProdData.
E. Configure an HTTP virtual server on the Exchange front-end server at the main office. Associate the HTTP virtual server with ProdData.
F. Configure an HTTP virtual server on the Exchange back-end server at the main office. Associate the HTTP virtual server with ProdData.
Answer: B E F