PrepAway - Latest Free Exam Questions & Answers

You need to identify which user sent the message

You deploy Office 365. All the members of a team named Sales have full access to a shared mailbox named
Sales. You enable auditing for all shared mailboxes. From the Sales mailbox, an email message that contains inappropriate content is sent. You need to identify which user sent the message. What should you do? user-established, people-to-people sharing of calendar information with different types of external users. To identify which user sent the message, you should view the sharing policies to reveal the relevant mailbox.

PrepAway - Latest Free Exam Questions & Answers

A.
From the Exchange Control Panel, run an administrator role group report.

B.
From Windows PowerShell, run the Get-SharingPolicy cmdlet.

C.
From Windows PowerShell, run the Write-AdminAuditLog cmdlet.

D.
From Windows PowerShell, run the New-MailboxAuditLogSearch cmdlet.

Explanation:

The cmdlet New-MailboxAuditLogSearch is used to search in auditlogs.
Incorrect Answers:
B: The Get-SharingPolicy cmdlet allows you to view the settings of sharing policies. Sharing policies allow for
References: https://technet.microsoft.com/en-us/library/ff522362(v=exchg.150).aspx

One Comment on “You need to identify which user sent the message”

  1. deles says:

    PS C:\> Get-Help New-MailboxAuditLogSearch -detailed

    NAME
    New-MailboxAuditLogSearch

    SYNOPSIS
    This cmdlet is available in on-premises Exchange and in the cloud-based service. Some parameters and settings may
    be exclusive to one environment or the other.

    Use the New-MailboxAuditLogSearch cmdlet to search mailbox audit logs and have search results sent via email to
    specified recipients.

    For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax
    (https://technet.microsoft.com/library/bb123552.aspx).
    : TrueWacExternalServicesEnabled : TrueWacOMEXEnabled : FalseReportJunkEmailEnabled : TrueGroupCreationEnabled : TrueSkipCreateUnifiedGroupCustomSharepointClassification : TrueWebPartsFrameOptionsType : SameOriginUserVoiceEnabled : TrueSatisfactionEnabled : TrueFreCardsEnabled : TrueConditionalAccessPolicy : OffConditionalAccessFeatures : {}OutlookBetaToggleEnabled : TrueAdminDisplayName :ExchangeVersion : 0.10 (14.0.100.0)Name : OwaMailboxPolicy-DefaultDistinguishedName : CN=OwaMailboxPolicy-Default,CN=OWA Mailbox Policies,CN=Configuratio




    1



    0

Leave a Reply