###BeginCaseStudy###

Testlet 1
Overview
General Overview
Proseware, Inc., is an international manufacturing company that has 1,000 users. Proseware has a sales
department, a marketing department, a research department, and a human resources department.
Proseware purchases another company named Contoso, Ltd. Contoso has 500 users.
Physical Locations
Proseware has two main offices located in New York and London.
The offices connect to each other by using a WAN link. Each office connects directly to the Internet. Contoso
has a single office in Dallas.
Existing Environment
Active Directory Environment
The Proseware network contains an Active Directory forest named proseware.com. The forest contains a single
domain. All domain controllers run Windows Server 2012.
Each office contains three domain controllers. Each office is configured as an Active Directory site.
The Contoso network contains an Active Directory forest named contoso.com. The forest contains a single
domain. All domain controllers run Windows Server 2012.
Exchange Server Organization
Proseware has an Exchange Server 2013 organization that contains four servers. The servers are configured
as shown in the following table.

EX3 and EX4 are the members of a database availability group (DAG) named DAG1. DAG1 has two DAG
networks. The networks are configured as shown in the following table.

Users connect to mail.proseware.com for Microsoft Outlook and Outlook Web App services.
Mail.proseware.com resolves to an IP address on a hardware load balancer.
All Outlook Anywhere users are enabled for Cached Exchange Mode.
Proseware pilots a hybrid deployment of Exchange Server 2013 and Microsoft Office 365. The mailbox of each
pilot user is moved to Office 365. For the pilot mailboxes, all inbound email messages from the Internet are
delivered to the Exchange Server organization, and then forwarded to Office 365.
Contoso has an Exchange Server 2010 organization.
Problem Statements
Proseware identifies the following issues:MapiNet is saturated with network traffic caused by the database replication between the members of DAG1
over MapiNet.
The pilot users report that entries added to their Safe Senders list and their Blocked Senders list fail to work.
A recent power outage in the New York office prevents all users from accessing their mailbox.
A user named User1 reports that email messages are being sent from her mailbox without her consent.
Requirements
Planned Changes
Proseware plans to implement the following changes:
Several users at Contoso will use a mailbox at Proseware as their primary mailbox. The Contoso users will
use Autodiscover to configure their client settings and will use single sign-on.
For a special project, an IT administrator will create 20 distribution groups that will each contain 200
members.
Certain users in both companies will have a contoso.com SMTP suffix as their primary email address.
Technical Requirements
Proseware identifies the following technical requirements for the Exchange Server organization:
Internal email messages must be rejected if the messages cannot be protected by using Shadow
Redundancy.
All database replication between DAG1 members must occur over the ReplNet network.
Site Resiliency Requirements
Proseware identifies the following site resiliency requirements for the Exchange Server organization:
All mailboxes must be available if a single site becomes unavailable. The solution must not require
administrator intervention.
User traffic on the WAN links must be minimized.
Email Security Requirements
Proseware identifies the following requirements for securing email messages:
Email recipients must be able to identify whether an email message was modified during delivery.
All email messages stored in the mailbox databases must be protected from theft.
Users must be able to encrypt email messages from Outlook Web App.
Retention Requirements
Proseware plans to reduce mailbox server storage usage and to limit company liability. Proseware identifies the
following requirements:
Email messages in the Deleted Items folder must be retained for only 30 days.
Email messages in a mailbox folder named Projects must be retained for 540 days, unless the messages
contain contractual information.
Email messages in the Projects folder that contain contractual information must be retained indefinitely.
All other email messages must be removed after one year.

###EndCaseStudy###

HOTSPOT
You need to recommend a solution to audit the issue of User1.
Which command should you recommend? (To answer, select the appropriate options in the answer area.)
Hot Area:

Answer:

Explanation:
Scenario: A user named User1 reports that email messages are being sent from her mailbox without her
consent.
For mailboxes in your organization that you wish to enable audit logging on you can do so using the Set-Mailbox
cmdlet.
* The AuditDelegate parameter specifies the operations to log for delegate users. Valid values include:
None Update Move MoveToDeletedItems SoftDelete HardDelete FolderBind SendAs SendOnBehalf
* Send As
This permission allows delegates to use the mailbox to send messages. After this permission is assigned to a
delegate, any message that the delegate sends from the mailbox will appear to have been sent by the mailbox
owner.
Incorrect:
* Send on Behalf
This permission also allows a delegate to use the mailbox to send messages. After this permission is assignedto a delegate, the From address in any message sent by the delegate indicates that the message was sent by
the delegate on behalf of the mailbox owner.
* The AuditEnabled parameter specifies whether to enable or disable mailbox audit logging. If auditing is
enabled, actions specified in the AuditAdmin, AuditDelegate, and AuditOwner parameters are logged. Valid
values include:
$true
Mailbox audit logging is enabled.
$false
Mailbox audit logging is disabled.
The default value is $false.
Set-Mailbox
https://technet.microsoft.com/en-us/library/bb123981(v=exchg.150).aspx