Objective 3.1 Exchange 2010

Question 1

You should be aware that Outlook defaults to ______ when interacting with Exchange Server 2010 SP1 or SP2.

Answer 1

RPC

Question 2

To support POP3 and IMAP4 traffic, you need to enable both these services on the ______ server and ensure that you configure the mailbox user’s settings to allow access to their mailbox by using the appropriate protocol.

Answer 2

Client Access

Question 3

You use the Services Console to start and start and stop the POP3 and IMAP4 services on a ______ server. Typically you would set the service startup type to Automatic.

Answer 3

Client Access

Question 4

Unencrypted POP3 traffic uses TCP port 110, POP3 traffic encrypted with SSL uses port ______. Unencrypted IMAP4 traffic uses TCP port 143, IMAP4 traffic encrypted with SSL uses port ______.

Answer 4

995,

993

Question 5

You can enable IMAP4 or POP3 for a specific user mailbox by editing the user’s mailbox ______ dialog box.

Answer 5

Properties

Question 6

You can use the EMC to access the Properties dialog box for POP3 or IMAP4 and specify an X.509 certificate name on the ______ tab. You can also use the EMS Set-PopSettings or Set-ImapSettings cmdlet, as appropriate. The following command configures the POP3 service on server VAN-EX1 to use TLS or SSL security, and specifies that a certificate named MyCert01 is used for that purpose: ______.

Answer 6

Authentication,

Set-PopSettings -server VAN-EX1 -X509CertificateName MyCert01

Question 7

Outlook Express and Windows Live Mail use ______ to access user mailboxes. To ensure email availability to recipients who are using these clients, you need to configure this service to start automatically.

Answer 7

POP3

Question 8

When you install Exchange Server 2010 SP1 OR SP2 on a computer, this installs a default ______ certificate.

Answer 8

self-signed

Question 9

In Exchange 2010, subject alternative name (SAN)s allow an SSL certificate to be mapped to multiple ______. The Exchange self-signed certificate will have SANs that correspond to the name of the Exchange server, including the server name and the server’s FQDN.

Answer 9

FQDNs

Question 10

When generating a certificate request file, you can specify that you want to apply this certificate to all subdomains by using ______. Using this option, you can add subdomains at a later stage without having to update an existing certificate.

Answer 10

wildcards

Question 11

You can use the EMS ______ cmdlet to assign services to a certificate.

Answer 11

Enable-ExchangeCertificate

Question 12

You should be able to use the ______ Wizard from the EMC or the EMS ______ cmdlet to create a new ActiveSync Mailbox Policy.

Answer 12

New Exchange ActiveSync Mailbox Policy,

New-ActiveSyncMailboxPolicy

Question 13

You can use the EMS ______ cmdlet to configure ActiveSync device policies.

Answer 13

Set-ActiveSyncMailboxPolicy

Question 14

You can manage mobile devices by using EMS, including performing a remote ______ of the device.

Answer 14

wipe

Question 15

The following four EMS cmdlets are available to manage mobile devices: ______.

Answer 15

• Get-ActiveSyncDevice – Lists all the mobile phones that have been paired with mailboxes.
• Get-ActiveSyncDeviceStatistics – Provides info about mobile devices that are paired with specific mailboxes.
• Clear-ActiveSyncDevice – Wipes a mobile device.
• Remove-ActiveSyncDevice – Removes the relationship between a specific mailbox and a mobile device.

Question 16

When OWA policies are configured appropriately, users can perform a remote wipe on a mobile device from OWA. Note that ______ privileges are required to use EMS cmdlets to wipe mobile devices, but ordinary users can wipe their own mobile devices remotely by using OWA.

Answer 16

administrator

Question 17

You should be aware that the Autodiscover service provides clients running Outlook 2007 and Outlook 2010 and mobile phones running Windows Mobile 6.1 or later with user profile ______ settings.

Answer 17

configuration

Question 18

You can use the EMS ______ cmdlet to verify that the Autodiscover service settings are working properly for Outlook 2007 and 2010 clients. For example, the following command checks that Autodiscover is functioning properly on server CAS02: ______.

Answer 18

Test-OutLookWebServices,

Test-OutlookWebServices –ClientAccessServer CAS02

Question 19

Remember that to enable the Autodiscover service and ActiveSync for Internet users, you need to assign an external name to the ______ server. You can do this, for example, by adding an A record in DNS.

Answer 19

Client Access

Question 20

You can use the EMS ______ cmdlet to configure ActiveSync authentication. You can use this cmdlet with (for example) the BasicAuthEnabled, ClientCertAuth, ExternalAuthenticationMethods, InternalAuthenticationMethods, and MobileClientCertificateProvisioningEnabled parameters.

Answer 20

Set-ActiveSyncVirtualDirectory

Question 21

Certificate-based authentication is not the only security feature available for ActiveSync. You can use certificate-based authentication together with other security features, such as local device wipe and a device password. The private key and certificate for client authentication are stored in ______ on the mobile phone. If an unauthorized user tries to bypass the mobile phone password, all user data is purged, including the certificate and private key.

Answer 21

memory

Question 22

You can configure ActiveSync settings by editing the ActiveSync virtual directory properties using the EMC. You can also configure the ActiveSync virtual directory by using the ______ cmdlet. For example, the following command enables bad item reporting on the server VAN-EX1: ______.

Answer 22

Set-ActiveSyncVirtualDirectory,

Set-ActiveSyncVirtualDirectory -Identity “VAN-EX1\Microsoft-Server-ActiveSync” -BadItemReportingEnabled:$true

Question 23

The EMS ______ cmdlet allows you to test to verify that ActiveSync is functioning properly. For example, the following command tests ActiveSync connectivity for the mailbox Kim_Akers on Client Access server GLA_CAS02: ______.

Answer 23

Test-ActiveSyncConnectivity,

Test-ActiveSyncConnectivity –ClientAccessServer GLA_CAS02 –URL http://adatum.com/mail -MailboxCredential “Kim_Akers”

Question 24

You can reconfigure the URL of the ActiveSync virtual directory by using the ______ cmdlet. This might be necessary if you want users to be able to access a mailbox server through the Internet by using ActiveSync.

Answer 24

Set-ActiveSyncVirtualDirectory

Question 25

You can use the ______ Wizard from the EMC to configure the external name associated with OWA, ActiveSync, and Exchange Control Panel (ECP).

Answer 25

Configure External Client Access Domain

Question 26

You can also use the ______ cmdlet to configure the external client access domain name for ActiveSync. For example, the following command sets the external client access domain for ActiveSync on the default Exchange ActiveSync virtual directory on the Client Access server CAS01 to http://adatum.com/sync: ______.

Answer 26

Set-ActiveSyncVirtualDirectory,

Set-ActiveSyncVirtualDirectory -Identity “CAS01\Microsoft-Server-ActiveSync” -ExternalUrl “http://contoso.com/sync”

Question 27

You should be aware that when a Microsoft Windows SharePoint Services (WSS) or Microsoft Windows file share request is received via ActiveSync, the tool looks for the requested host name in the Allow and Block lists. If, however, the host name is not found in either list, you should know how to specify the default action as Block or Allow. You use the ______ cmdlet to specify this action. You use this cmdlet with the ______ parameter, which you set to Block or Allow.

Answer 27

Set-ActiveSyncVirtualDirectory,

RemoteDocumentsActionForUnknownServers

Question 28

You can specify the remote servers that are blocked or allowed for remote document access. The ______ parameter lists all the allowed servers for remote document access. The ______ parameter lists all the blocked servers for remote document access. You set either or both of these parameters by using the Set-ActiveSyncVirtualDirectory cmdlet.

Answer 28

RemoteDocumentsAllowedServers,

RemoteDocumentsBlockedServers

Question 29

You should know that ______ keeps a mobile phone current over a cellular network connection. It provides notification to the mobile phone when new content is ready to be synchronized.

Answer 29

Direct Push

Question 30

You can specify a considerable number of settings by using Exchange ActiveSync mailbox policies. Mailbox policies can be configured by using the ______ cmdlet.

Answer 30

Set-ActiveSyncMailboxPolicy

Question 31

You should be aware that you can use the ______ cmdlet to enable the Autodiscover service in ActiveSync. You cannot configure the Autodiscover service for Exchange ActiveSync by using the EMC. Remember that the ability to use Autodiscover depends on the operating system of the mobile phone. Not all mobile phone operating systems that support synchronization with Exchange 2010 support Autodiscover. The following command configures Autodiscover for ActiveSync on the VAN-EX1 server: ______.

Answer 31

Set-ActiveSyncVirtualDirectory,

Set-ActiveSyncVirtualDirectory -Identity “VAN-EX1\Microsoft-Server-ActiveSync (Default Web Site)”

Question 32

You have installed an Exchange Server 2010 SP1 server in the contoso.com forest as a typical installation. Some Contoso employees use older workstations with Outlook Express email clients. How can you ensure that these employees can access mailboxes on the new server?

Answer 32

Start the POP3 service and configure it to start automatically.

Question 33

You want to ensure that external users can trust your organization’s OWA server. To what type of CA should you send your certificate request?

Answer 33

You should request and install an SSL certificate from a trusted third-party CA.

Question 34

What EMS cmdlet can you use to test the IMAP4 functionality for a specified Client Access server for all mailboxes on servers running Microsoft Exchange Server 2010 SP1 or SP2 in the same Active Directory site?

Answer 34

You use the Test-ImapConnectivity cmdlet.

Question 35

What EMS cmdlet could you use to limit the size of attachments that a user can download to a mobile device using ActiveSync?

Answer 35

You could use the Set-ActiveSyncMailboxPolicy cmdlet to set a device access rule that defines the maximum size of attachments that can be downloaded.

Question 36

What EMS cmdlet can you use to remotely wipe a mobile phone?

Answer 36

You use the Clear-ActiveSyncDevice cmdlet. (Note that there is also a setting for allowing a user to wipe a mobile phone through OWA.)