Question 1.
You work as the Exchange administrator at ABC.com. The ABC.com network has an Active Directory domain named ABC.com. The ABC.com Exchange organization contains two Exchange Server 2003 computers named ABC-SR11 and ABC-SR12 respectively. ABC-SR11 is configured as the mailbox server and ABCSR12 is configured as the front-end server. ABC-SR12 has Microsoft Outlook Web Access over SSL installed to allow ABC.com employees to access their e-mail. The ABC.com intranet is connected to the Internet via a firewall. When several employees complain that they are unable to access ABC-SR12, you investigate the issue and find that employees are able to access Outlook Web Access using HTTP or HTTPS.

You have been instructed to make sure that the ABC.com employees are only able to use HTTPS to access Outlook Web Access.

Which of the following actions should you take?

A. You should reconfigure the firewall to allow ABC.com employees to access port 443 on 
    ABCSR12, and then configure the default Web site on ABC-SR12 to require SSL connections.
B. You should reconfigure the firewall to allow ABC.com employees to access port 80 on 
    ABCSR12, and then configure the default Web site on ABC-SR12 to use port 443 for SSL 
    connections.
C. You should reconfigure the firewall to allow ABC.com employees to access port 993 on 
    ABCSR12, and then configure the default Web site on ABC-SR12 to require SSL connections 
    and 128- bit encryption.
D. You should reconfigure the firewall to allow ABC.com employees to access port 143 on  
    ABCSR12, and then configure the Exchange HTTP virtual server on ABC-SR12 to enable 
    forms-based authentication for Outlook Web Access.

Answer: A

Explanation: 
SSL utilizes port 443. The external firewall does not currently allow traffic on port 443 to pass. Opening up this port will take care of that issue. The default OWA site is currently not correctly setup to use HTTPS. This is why internal clients can connect to OWA using HTTP. Modifying the security on the OWA web site will solve this problem.

Reference:
MS white paper Exchange Server 2003 RPC over HTTP Deployment Scenarios
MS white paper Exchange Server 2003 Client Access Guide
MS white paper Exchange 2003 Front-End Back-End Topology

Question 2.
You work as the network Exchange administrator at ABC.com, who has their headquarters located in Miami. The ABC.com network has an Active Directory domain named ABC.com. All servers on the ABC.com network run Windows Server 2003 and all client computers run Windows XP Professional. The ABC.com network includes a server named ABC-EX01, which runs Microsoft Exchange Server 2003. ABC.com recently entered into partnership with Weyland Industries, who has their office located in Toronto. Part of the network in the Toronto office is configured as an Active Directory site within the ABC.com domain. A server named ABC-EX02 is configured to run Microsoft Exchange Server 2003 and located in the Toronto office. The two Exchange servers are configured in separate routing groups connected via a routing group connector. The Toronto and Miami offices are connected to each other via a leased line connection. You receive instruction from ABC.com to configure an ISDN-dialup connection as a backup connection in the event that the leased line connection becomes unavailable. During the course of your maintenance you discover that the ISDN dial-up connection is not used as a backup connection, but is used exclusively by the routing group connector. ABC.com wants you to make sure that the leased line connection is used as the primary connection, and that the ISDN connection is used only if the leased line connection fails.

Which of the following actions should you take?

A. You should configure ABC-EX01 and ABC-EX02 to be in the same Active Directory site.
B. You should configure ABC-EX01 and ABC-EX02 to be in the same routing group.
C. You should have a lower IP route cost assigned to the ISDN link and a higher link cost to the 
    leased line link.
D. You should configure ABC-EX02 to use ABC-EX01 as a smart host.
E. You should have a lower IP route cost assigned to the leased line link and a higher link cost to 
    the ISDN link.

Answer: E

Explanation: 
It is possible that the administrator reversed the values of the cost on the connections because IP route costs are used to set the preference levels between two routes to the same destination.

Question 3.
You work as the Exchange administrator at ABC.com. The ABC.com network has an Active Directory domain named ABC.com. ABC.com employs Exchange Server 2003 as its messaging system. All servers on the ABC.com network run Windows Sever 2003 and all Exchange servers run Exchange Server 2003. The Exchange organization contains an Exchange server named ABC-SR31, which is used to pass SMTP e-mail messages between ABC.com and the Internet and also stores the mailboxes of all ABC.com’s employees. The intranet is connected to the Internet via a firewall. 

When several employees complain that they continuously receive numerous unwanted e-mail messages, you investigate the issue and find that the unwanted e-mail messages received by ABC.com’s employees are the same. You also notice that the messages are being sent to a universal distribution group in the ABC.com domain. You must configure the network so that distribution groups are prevented from sending e-mail messages from the Internet to the ABC.com users. Your solution must enable the ABC.com users to continue to send and receive legitimate e-mail messages.

Which of the following is the best solution?

A. You should consider having the universal distribution groups converted to Domain Local 
    Distribution groups.
B. You should consider having the Exchange Attributes removed from the universal distribution 
    groups.
C. You should consider having the distribution groups configured to only permit e-mail messages 
    from authenticated users.
D. You should consider having the membership of the universal distribution groups hidden.

Answer: C

Explanation: 
Your best option in this scenario would be to select Option C. The universal group is used for mail distribution in your organization. You can configure the distribution group to accept mail from authenticate users only to stop receiving spam.

Incorrect answers
A: Converting the universal groups to domain local security groups on its own will not protect you 
against unsolicited mail. The security groups will still receive email
B: Removing the Exchange Attributes will remove the email address which would prevent ABC.com users from sending email to the groups.
D: Hiding the group membership will not protect you against unsolicited mail. The groups will still receive email.

Reference:
MS white paper Exchange Server 2003 RPC over HTTP Deployment Scenarios
MS white paper Exchange Server 2003 Client Access Guide
MS white paper Exchange 2003 Front-End Back-End Topology
MS white paper Exchange Server 2003 Message Security Guide
MS white paper Microsoft Exchange Intelligent Message Filter Deployment Guide

Question 4.
You work as the network Exchange administrator at ABC.com. The ABC.com network has an Active Directory domain named ABC.com. All servers on the ABC.com network have Windows Server 2003 installed and all workstations have Windows XP Professional installed. The ABC.com network contains an Exchange 2003 server named ABC-EX01, which hosts thousands of mailboxes in a single storage group. ABC-EX01 is equipped with a single RAID-5 device, which is configured as a single logical drive. ABC-EX01 is additionally equipped with a high-end CPU and has a 2GB of RAM.

During the course of the day the ABC.com network users with mailboxes hosted on ABC-EX01 complain that at times of peak usage their email-services become considerably slower and it takes longer for messages to be sent and opened using Microsoft Outlook. You have recently received instruction from the ABC.com network CIO to monitor the performance and you receive the values shown in the following exhibit:
 

You are required to improve the performance of e-mail for the network Exchange users on ABCEX01.

What should you do?

A. You should consider having a full-text index created on the mailbox store
B. You should consider having a new volume created on the existing RAID-5 device and move 
    The Exchange transaction logs to the new volume
C. You should consider having a new RAID device added and the Exchange transaction logs 
    moved to the new device
D. You should consider installing additional RAM
E. You should consider installing an additional processor

Answer: C

Explanation: 
The performance results indicate that the hard disk usage is very high and the other counter values are within acceptable limits. All changes to the Exchange databases are recorded first in the transaction logs.

Question 5.
You work as the Exchange administrator at ABC.com. The ABC.com Exchange organization has includes a solitary server named ABC-EX01 that has Exchange Server 2003 installed. All ABC.com users make use of Microsoft Outlook to send and receive e-mail messages. ABC-EX01 is equipped with dual CPUs and 2 GB Random Access Memory (RAM). ABC-EX01 is configured to host a storage group that contains one mailbox store. You receive reports that opening Outlook takes too long, and that every e-mail message being sent or opened takes too long. You monitor the ABC-EX01 and find that the inadequate RAM results in the primary bottleneck, which then results in sluggish performance. You, therefore, increase ABC-EX01’s RAM to 4 GB RAM. However, the ABC.com users continue to report sluggish Outlook performance.

Which of the following actions should you take to improve ABC-EX01’s performance?

A. You should increase the size of the virtual memory to 6GB.
B. You should place an additional switch that increases user mode memory usage to the Boot.ini 
    file in the mailbox servers.
C. You should increase the priority of the store.exe process in Task Manager.
D. You should set up an additional mailbox store on the server. Then divide the existing 
    Mailboxes between the old and the new mailbox store.

Answer: B

Explanation: 
If you have more than 1 GB of physical memory installed on a server that is running Exchange Server 2003, you must make sure that Exchange Server 2003 can make efficient use of that memory. If you are running Exchange Server 2003 on a Windows Server 2003-based computer, and if the /3GB switch is set, Microsoft recommends that you set the /USERVA=3030 parameter in the Boot.ini file. This configuration option increases the virtual address space.

Question 6.
You work as the network Exchange administrator at ABC.com. The ABC.com network has an Active Directory domain named ABC.com. All servers on the ABC.com network have Windows Server 2003 installed and all workstations have Windows XP Professional installed. The ABC.com DNS servers are configured with Active Directory Integrated zones. ABC.com has introduced a written security policy stating that these Active Directory zones should allow only secure dynamic updates. All computers are configured with static IP addresses. During the course of the business day you decided to configure a new Exchange server to supplement your current server. 

To this end, you first install the operating system and accept the typical network settings. After the installation of the operating system, you decided to install Exchange Server 2003. When you start it for the first time, you encounter an error message that states that the server is unable to locate the global catalog server.

Which of the following actions should you take to rectify this problem?

A. You should consider assigning a static TCP/IP configuration that includes the address of the 
    DNS server and register it manually in DNS.
B. You should consider configuring with a Hosts file containing the global catalog server address.
C. You should executing the ipconfig /registerdns command on the server
D. You should consider assigned a static TCP/IP configuration that includes the address of the  
    DNS server. Then join it to the domain and register it manually.
E. You should consider executing the ipconfig /renew command on the server.
F. You should configure the DNS zone to allow all dynamic updates.

Answer: D

Explanation: 
In the event of an operating system being installed with typical settings, it will result in configuring the server as a DHCP client. However in this scenario there is no DHCP server. This results in the new Exchange server being unable to get an address and no DNS server address and without this information it will be unable to locate the DNS server. And even if it did, it would not be able to register because only secure dynamic updates are allowed for security reasons. Thus you need to assign the server a static TCP/IP configuration including the address of the DNS server. Join the new Exchange server to the domain and register it manually in DNS.

Question 7.
You work as the Exchange administrator at ABC.com. The ABC.com network has an Active Directory domain named ABC.com. ABC.com has its headquarters in Chicago and branch offices in Dallas and Miami. Each of these offices contains a domain controller that runs Microsoft Windows Server 2003. You are planning to deploy one Exchange Server 2003 computer, which must be placed in a separate administrative group, in each ABC.com office. You have already prepared the forest and the domain to support Exchange Server 2003. You attempt to install the first Exchange server, and find that you are unable to select an administrative group in which to place the server so you decide to cancel the installation. You have to make sure that you are able to select an administrative group during installation.

Which of the following actions should you take?

A. You should consider Install Exchange Server 2003 by executing the setup /choosedc 
     Command and specifying the local domain controller.
B. You should consider installing Exchange System Manager and create the administrative 
    groups.
C. You should consider installing Exchange System Manager and assign the Exchange Full 
    Administrator permissions to the account used to installing Exchange Server 2003 at the  
    Exchange organization level.
D. You should consider installing Exchange by executing setup /choosedc and specifying the 
    local global catalog server on the new server in each branch office.
E. You should consider configuring the new server to point to the local global catalog server as its 
    primary DNS server. Then install Exchange Server 2003 on the new server.

Answer: B

Explanation: 
If the administrative group or routing group already exists, a server only can be assigned to a routing group or to an administrative group during the installation phase. By default, if one Exchange server has been installed only one administrative group, the First Administrative Group exists. To be able to install the FIRST Exchange server in a different administrative Group than the default, the required administrative group must be created prior to the installation. The forest and the domain are already prepared to support Exchange Server 2003. You must install the Exchange System Manager tool choosing a custom action during the setup. 

Incorrect Answers
A: Exchange Setup includes the new /ChooseDC switch. You can now enter the fully qualified domain name (FQDN) of a Windows domain controller to force Setup to read and write all data from the specified domain controller (the specified domain controller must reside in the domain where you install your Exchange 2003 server). When installing multiple Exchange 2003 servers simultaneously, forcing each server to communicate with the same Active Directory directory service domain controller ensures that replication latencies do not interfere with Setup and cause installation failures.
"setup.exe" /ChooseDC “Your FQDN Server name here”
The principal reason to use this switch is to avoid errors during multiple Exchange setup running to same time
C: Exchange System Manager by default is installed when you install the first Exchange server.
Also is required to permit administrators who are assigned the Exchange Full Administrator administrative role at the administrative group level to install and to remove Exchange Server 2003, to uABCrade servers, and to perform disaster recovery on servers that are in that administrative group. They already have and account that is able to perform this task, same account that they have used to run ForestPrep and DomainPrep switch’s
D: This is similar to answer A and is thus not required for this scenario.
E: This is not a DNS issue. The problem is that the administrative groups haven’t yet been created.

Reference
Exchange Server 2003 Deployment Guide

Question 8.
You work as the Exchange administrator at ABC.com. The ABC.com network has an Active Directory domain named ABC.com. All servers on the ABC.com network have Windows Server 2003 installed and all workstations have Windows XP Professional installed. The ABC.com network has a server named ABC-EX01 that runs Exchange Server 2003. You have been instructed to configure sender filtering to minimize the amount of junk e-mail being received by ABC.com users. After specifying a list of known junk e-mail senders in the blockedsender list, you find that users still report that they receive e-mail from these senders.

Which of the following would allow you to complete this task?

A. You should enable the filter on the IP address of the SMTP virtual server on the Exchange 
    server.
B. You should enable the Windows Firewall on the Exchange server.
C. You should configure the authentication settings of the SMTP virtual server on the Exchange 
    server to allow Integrated Windows Authentication.
D. You should configure the of the SMTP virtual server on the Exchange server to enable logging.

Answer: A

Explanation: 
The filter is created, but has not been applied. Hence, the junk mail still arrives.

Question 9.
You work as the Exchange administrator at ABC.com. The ABC.com network has an Active Directory domain named ABC.com. All servers on the ABC.com network run Windows Server 2003 and all client computers run Windows XP Professional. The ABC.com network also has a firewall that connects the intranet to the internet. The ABC.com Exchange organization contains two servers running Exchange Server 2003. In addition, you have configured another server as an email gateway server, which is configured for queuing and delivery of outbound SMTP mail ABC.com then releases a new security policy that prohibits SMTP mail from being sent directly to the Internet by the Exchange servers. The new security policy stipulates that only the gateway server should send SMTP mail to the Internet. The new security policy does, however, state that the Exchange servers should be capable of sending mail directly to one another. You have been tasked with making sure that the new security policy is adhered to.

Which of the following actions should you take?

A. You should configure the MX records for ABC.com to point to the internal IP address of the 
     gateway server.
B. You should configure the Default Gateway of both Exchange servers to point to the gateway 
     server.
C. You should configure the firewall to block outbound SMTP traffic from the Exchange servers.
D. You should delete the SMTP virtual servers on the Exchange servers.
E. You should configure each SMTP virtual server to make use of the gateway server as a smart 
    host.

Answer: E

Explanation: 
The company policy states that Exchange servers must not send SMTP mail directly to the Internet. Therefore, we will need to configure on each an SMTP virtual server that will send all the traffic to a smart host, in this case the gateway server. The gateway server will then forward the email to the internet.

References
MS article 821911, How to Configure Exchange Server 2003 to Use a Smart Host IP Address Using ISA Server 2000 with Exchange Server 2003 MS White paper

Question 10.
You work as the Exchange administrator at ABC.com. The ABC.com network has an Active Directory domain named ABC.com. All servers on the network run Windows Server 2003. The ABC.com network contains two servers, named ABC-SR01 and ABC-SR02, running Exchange Server 2003. ABC-SR01 is configured as the mailbox server for ABC.com’s employees, and cannot be accessed from the Internet. ABC-SR02 serves as a front-end server that is only utilized when employees make use of HTTP or IMAP4 to access their mailboxes. You have been tasked with making sure that ABC-SR02 only has the services required to perform its appointed role enabled.

Which of the following actions should you take?

A. You should consider having the IIS Admin Service, World Wide Web Publishing Service, and 
    Microsoft Exchange Information Store disabled.
B. You should consider having the IIS Admin Service, Microsoft Exchange Information Store, and  
    Microsoft Exchange Post Office Protocol version 3 (POP3) disabled.
C. You should consider having the Microsoft Exchange Information Store, Microsoft Exchange  
    Post Office Protocol version 3 (POP3), and Microsoft Exchange Message Transfer Agent 
    (MTA) Stacks disabled.
D. You should consider having Microsoft Exchange Message Transfer Agent (MTA) Stacks, the  
    Microsoft Exchange Internet Message Access Protocol, Version 4 (IMAP4), and the Microsoft  
    Exchange Information Store disabled.

Answer: C

Explanation: 
You do not need Microsoft POP3 Service, which provides e-mail transfer and retrieval services. The Microsoft POP3 Service system service is combined with the SMTP Service, which allows users to send outgoing e-mail, for full e-mail services. The Exchange Information Store service supports data storage (mailboxes and public folders data) on the server. Since a front end OWA server queries backend server for data, this service can be disabled during regular operations. Microsoft Exchange MTA Stacks service supports message routing to foreign messaging system using X.400 and gateway connectors. It is not a required service on a front end OWA server.

Reference:
SECURING AN EXCHANGE 2000 OWA FRONTEND SERVER WITH SECURITY TEMPLATES

	Web www.certsbraindumps.com