Free 70-341 sample questions

Correct answer: Get-ClientAccessServer | Add-ADPermission -User 'Exchange Servers' -ExtendedRights 'ms-Exch-EPI-Token-Serialization'

For Kerberos authentication to function correctly with a Client Access Server array or load-balanced CAS, the credentials must be shared among the servers. This is accomplished by using a shared alternate service account (ASA) credential. The `ms-Exch-EPI-Token-Serialization` extended right allows Exchange servers to read and write the service principal name (SPN) and encryption keys from the alternate service account in Active Directory. The other cmdlets configure different aspects of authentication but do not address the core requirement of sharing Kerberos credentials.

Correct answer: Enable `ReplayLagManagerEnabled` on the database copy.

The `ReplayLagManagerEnabled` property, which is enabled by default, allows the system to automatically play down log files for lagged copies when certain conditions are met, such as low disk space or when the lagged copy has been determined to be the only available copy for a specific period. This feature, also known as lazy log truncation, helps prevent the log drive from filling up while still preserving the intended replay lag for recovery purposes. Circular logging is incompatible with lagged copies. Setting `TruncationLagTime` delays truncation but is superseded by `ReplayLagTime`.

Correct answer: Add an exception: 'The sender's domain is... fabrikam.com'

The most direct and efficient way to exempt a specific domain from a transport rule is to use the 'The sender's domain is...' exception. This condition specifically checks the domain part of the sender's email address. Using 'The sender's IP address is in the range' is less reliable as IP addresses can change. Creating a separate, higher-priority rule to stop processing is more complex than necessary. Using a message header is a valid but less straightforward method for this common requirement.

Correct answer: Configure the database copies on servers in DC3 with a high activation preference and set `-DatabaseCopyAutoActivationPolicy` to `Blocked`.

To prevent automatic failover to a specific site, you must block the activation of database copies in that site. This is achieved by setting the `-DatabaseCopyAutoActivationPolicy` parameter on the Mailbox server to `Blocked`. This ensures that even if the server is part of the DAG and has healthy database copies, Managed Availability will not automatically activate them. A manual server switchover would be required to bring the databases online in DC3. DAC mode is necessary for site resilience but doesn't prevent failover to a specific site. Activation preference influences the target of a failover but doesn't block it.

Correct answers: New-Mailbox -Room -Name 'CR101'; Set-CalendarProcessing -Identity 'CR101' -AutomateProcessing AutoAccept -DeleteComments $true

The `New-Mailbox -Room` cmdlet is the correct command to create a new room mailbox, which is a specific type of resource mailbox.

The `Set-CalendarProcessing` cmdlet is used to configure the automated booking policies for a resource mailbox. Setting `AutomateProcessing` to `AutoAccept` fulfills the requirement for automatic acceptance, and `-DeleteComments $true` fulfills the requirement to remove comments.

Correct answer: False

This statement is false. In Exchange 2013, a Client Access server will only proxy connections to Mailbox servers within its own Active Directory site. If a user connects to a CAS in a different site from their active mailbox, that CAS will proxy the connection to a CAS in the correct AD site, which will then communicate with the Mailbox server. This behavior is known as a double-hop proxy and maintains site affinity.

Correct answer: Modify the transport rule action to allow the user to override.

DLP policies are implemented as transport rules. The action of a transport rule can be configured to allow a user override with a business justification. When this is enabled, the user is presented with a Policy Tip in Outlook explaining the violation. The user can then choose to override the block and provide a reason, which is logged for auditing purposes. This meets the requirement of allowing an exception with justification.

Correct answer: /m:RecoverServer

The `/m:RecoverServer` switch is used with `Setup.exe` to perform a disaster recovery installation of a failed Exchange server. This process reads the configuration information for the server from Active Directory and applies it to the new hardware, effectively rebuilding the server to its pre-failure state without needing a backup of the server itself.

Correct answer: Reissue the certificate to include `autod.corp.contoso.com` as a Subject Alternative Name (SAN).

The root cause of the problem is a certificate name mismatch. The client is trying to connect to `autod.corp.contoso.com`, but the certificate presented by the server is only valid for `mail.contoso.com`. The best practice and most effective solution is to reissue the SSL certificate to include all necessary hostnames (like autodiscover, OWA, etc.) as Subject Alternative Names (SANs). This ensures that clients can validate the certificate for all services they connect to. Changing internal URIs to match the external name is another valid approach (split-brain DNS), but reissuing the certificate is often the more direct solution if other internal services rely on the `corp` namespace.

Correct answers: A retention policy; A set of retention tags

A retention policy is the container object that is applied to mailboxes. It links together one or more retention tags to enforce the desired messaging records management (MRM) settings.

Retention tags define the specific actions and timeframes. You would need at least two: a Default Policy Tag (DPT) with a 'Move to Archive' action after 730 days (2 years), and another DPT with a 'Permanently Delete' action after 2555 days (7 years) that applies to the archive.