- (Exam Topic 5)
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your company has an Exchange Online tenant that contains 2,000 mailboxes.
A partner company named Fabrikam, Inc. uses a third-party messaging solution. The outbound SMTP server for Fabrikam uses an IP address of 131.107.2.22.
You discover that several email messages from the fabrikam.com domain are erroneously marked as spam. You need to ensure that all the email messages sent from the fabrikam.com domain are delivered successfully
to the user mailboxes of your company.
Solution: You create a spam filter policy. Does this meet the goal?
Correct Answer:
A
Add Fabrikam.com to the ‘Domain allow list’ in a spam filter policy.
- (Exam Topic 5)
Please wait while the virtual machine loads. Once loaded, you may proceed to the lab section. This may take a few minutes, and the wait time will not be deducted from your overall test time.
When the Next button is available, click it to access the lab section. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality (e.g., copy and paste, ability to navigate to external websites) will not be possible by design.
Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn't matter how you accomplish the task, if you successfully perform it, you will earn credit for that task.
Labs are not timed separately, and this exam may have more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided.
Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.
Use the following login credentials as needed:
To enter your username, place your cursor in the Sign in box and click on the username below.
To enter your password, place your cursor in the Enter password box and click on the password below.
Microsoft 365 Username: admin@abc.com
Microsoft 365 Password: xxxxxx
If the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to reload the portal in a
new browser tab.
The following information is for technical support purposes only.
Lab Instance: XXXXXX
Another administrator at contoso.com plans to deploy an SMTP smart host that uses an IP address of 131.107.2.200.
You need to prepare a solution to route all emails sent to users in the @contoso.com domain from your organization by using the SMTP host. The solution must have a status set to Off until the administrator deploys the smart host.
To complete this task, sign in to the Exchange admin center.
Solution:
In the EAC, navigate to Mail flow
>Send connectors, and then click Add +. This starts the New Send
connector
wizard. On the first page, enter the following information:
- Name: Enter a descriptive name for the Send connector, for example, Smart host to Internet.
- Type: Select a descriptive value. For example, Internet
oCr ustom.
When you're finished, click Next. On the next page, select Route mail through smart hosts, and then click Add +. In the Add smart
host
dialog box that appears, identify the smart host by using one of the following values:
- IP address: For example, 192.168.3.2.
- Fully qualified domain name (FQDN): For example, securitydevice01.contoso.com. Note that the Exchange source servers for the Send connector must be able to resolve the smart host in DNS by using this FQDN.
When you're finished, click Save. You can enter multiple smart hosts by repeating Step 3. When you're finished, click Next.
On the next page, in the Route mail through smart hosts
that's required by the smart host. Valid values are:
section, select the authentication method
Table Description automatically generated
When you're finished, click Next. On the next page, in the Address space
appears, enter the following information:
section, clickAdd +. In the Add domain
dialog box that
- Type: Verify SMTP is entered.
- Fully Qualified Domain Name (FQDN): Enter an asterisk (*) to indicate the Send connector applies to messages addressed to all external domains. Alternatively, you can enter a specific external domain (for example, contoso.com), or a domain and all subdomains (for example, *.contoso.com).
- Cost: Verify 1 is entered. A lower value indicates a more preferred route for the domains you specified. When you're finished, click Save. Back on the previous page, the Scoped send connector
setting is important if your organization has
Exchange servers installed in multiple Active Directory sites:
- If you don't select Scoped send connector, the connector is usable by all transport servers (Exchange 2013 or later Mailbox servers and Exchange 2010 Hub Transport servers) in the entire Active Directory forest. This is the default value.
- If you select Scoped send connector, the connector is only usable by other transport servers in the same Active Directory site.
When you're finished, click Next. On the next page, in the Source server
section, clickAdd +. In the Select a Server
dialog box that
appears, select one or more Mailbox servers that you want to use to send outbound mail to the smart host. If you have multiple Mailbox servers in your environment, select the ones that can route mail to the smart host. If you have only one Mailbox server, select that one. After you've selected at least one
Mailbox server, click Add, click OK, and then click Finish.
After you create the Send connector, it appears in the Send connector list. From the Send connector list, you can turn the connector on or off. Reference:
https://docs.microsoft.com/en-us/exchange/mail-flow/connectors/outbound-smart-host-routing?view=exchserver
Does this meet the goal?
Correct Answer:
A
- (Exam Topic 5)
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have a Microsoft Exchange Server 2019 hybrid deployment. All user mailboxes are hosted in Microsoft 365. All outbound SMTP email is routed through the on-premises Exchange organization.
A corporate security policy requires that you must prevent credit card numbers from being sent to internet recipients by using email.
You need to configure the deployment to meet the security policy requirement. Solution: From Microsoft 365, you create a data loss prevention (DLP) policy. Does this meet the goal?
Correct Answer:
A
Reference:
https://docs.microsoft.com/en-us/microsoft-365/compliance/data-loss-prevention-policies?view=o365-worldwid
- (Exam Topic 5)
You have a Microsoft 365 E5 subscription.
A user attempts to send an email message to an external recipient and receives the following error message: “Your message couldn’t be delivered because you weren’t recognized as a valid sender. The most common reason for this is that your email address is suspected of sending spam and it’s no longer allowed to send messages outside of your organization. Contact your mail admin for assistance. Remote Server returned ‘550 5.1.8 Access denied, bad outbound sender’.”
You need to ensure that the user send email to external recipients. What should you do?
Correct Answer:
C
http://automatica.com.au/2020/01/office-365-single-users-unable-to-send-email-access-denied-bad-outbound-sender-er
- (Exam Topic 5)
Your on-premises network contains a proxy server and a firewall. The proxy server is configured to inspect the contents of HTTP and HTTPS sessions to identify disallowed content. Only the proxy server can connect to the internet through the firewall.
You implement Microsoft Exchange Online.
Users report that they receive an error message when they attempt to connect to their mailbox by using Microsoft Outlook.
From the internal network, you connect to https://outlookoffice.com/mail and discover a certificate error. You discover that the certificate error contains information about a certificate issued by your company's
internal certification authority (CA).
You need to ensure that all the users can connect successfully to their mailbox. What should you do?
Correct Answer:
D
Reference:
https://docs.microsoft.com/en-us/outlook/troubleshoot/connectivity/error-when-outlook-uses-rpc-https-connects