70-224 Installing, Configuring, and Administering Microsoft Exchange 2000 Server

QUESTION 1:
You are the administrator of an Exchange organization that has three Exchange 2000 Server computers.
Each server supports 1,500 mailboxes. Some users are using Microsoft Outlook 2000, and some are using
Outlook Web Access. Recently, you enabled SSL for the default web site on all servers and now require
all Outlook Web Access users to connect by using secure HTTP.
Users report that all the servers are much slower than they were before you enabled SSL. You must keep
the additional level of security provided by SSL, but you need to improve server responsiveness.
What should you do?
A.Install an additional Exchange 2000 Server computer to support the secure HTTP users, and configure it as a
Front-End server.
B.Remove SSL and implement TLS on the SMTP and IMAP4 virtual servers.
C.Install two additional Exchange 2000 Server computers, and move the Outlook Web Access users to the new
server.
D.Specify Digest Authentication on the default web site, and disable Integrated Windows Authentication.
E.Enable Windows 2000IPSecfor the network adapter that supports SQL.
Answer: A
Explanation:
It is a good idea to deploy Exchange 2000 Server in a Front-End/Back-End Configurations arrangement if you
want to support a large number of users over the Internet. Front end servers concentrate incoming client
connections and proxy them to the appropriate Back-End servers where the mailboxes reside. The Front-End
server looks up the mailbox location using Active Directory. This removes some of the load from mailbox
servers which will speed up response times.
Incorrect answers:
B:All Outlook Web Access users will connect via secure HTTP, so configuration of the SMTP and IMAP4
virtual servers is irrelevant to these users.
C:Whilst installing 2 additional servers and moving Outlook Web Access users' mailboxes to these servers
would help performance, there are a number of reasons that this is not the optimal solution. Using this solution
you would need to (i) know which users were using Outlook Web Access, (ii) manage this solution if users
changed access methods, (iii) provide 2 new servers and (iv) would not have a solution for users who used both
Outlook and Outlook Web Access to access mailboxes. Therefore this solution is not the best answer.
D: Digest authentication is an Internet Standard that transmits password information in the form of encrypted
hash
values to the server. Exchange 2000 Server supports this form of authentication without further configuration
support it. integrated windows authentication is more complex and secure than digest authentication because
support it. Integrated Windows Authentication is more complex and secure than Digest Authentication because
it uses the Windows network security mechanisms. Since you are looking to increase security this solution
would not be optimal, as it would result in a decrease in the level of security.
E:Since SQL is not being used this answer is not applicable. IPSEC is generally used to secure server to server
communications rather then client to server communications.
MCSE Training Kit-Microsoft Exchange 2000 Server Implementation and Administration, Chapter 22
Microsoft Outlook Web Access, Lesson 2: Outlook Web Access Environments
MCSE Training Kit-Microsoft Exchange 2000 Server Implementation and Administration, Chapter 11


Internet-Based Client Access, Lesson 2: Configuring Virtual Protocol Servers
MCSE Training Kit-Microsoft Exchange 2000 Server Implementation and Administration, Chapter 16:
Message Routing Administration, Lesson 2: Connecting Routing Groups
QUESTION 2:
You are the Exchange Administrator for Alecnet .s T he company has three Windows 2000 Server
computers on the network. One server is configured as an Exchange 2000 member server. The remaining
two servers are dedicated Windows 2000 Domain Controllers.
The company hires 50 new employees each month. The rate is expected to double within the next six
months. You need to ensure that the Exchange environment can handle the anticipated growth without
affecting performance for users.
What should you do?
A.Install Exchange 2000 Server on both of the Windows 2000 Domain Controllers.
Configure these servers as mailbox servers.
B.Install Exchange 2000 Server on a new Windows 2000 Server computer.
Configure this server as mailbox server.
C.Install Exchange 2000 Server on a new Windows 2000 Server computer.
Configure this server as a dedicated SMTP virtual server.
D.Install Exchange 2000 Server on two new Windows 2000 Server computers.
Configure these servers as front server, and configure load balancing.
Answer: B
Explanation:
Since the number of users is set to increase it is likely that additional resources will be required inorder
to maintain performance at a level similar to the current level. By installing Exchange 2000 Sever on a new
machine you can balance the load between multiple Exchange servers without place additional load on the
Domain Controllers by hosting different mailboxes on different server machines.
Incorrect answers:
A:By installing Exchange 2000 Sever on the Domain Controllers you can balance the load between multiple
Exchange servers, but you will place additional load on the Domain Controllers, which may affect their
performance. Microsoft recommends that Exchange 2000 Server not be installed on Domain Controllers but on
member servers instead. This frees the server from Active Directory replication and other Domain Controller
tasks, such as client authentication.
C:One SMTP virtual server is usually sufficient for Exchange 2000 Server, but there are situations in which
multiple virtual servers can be helpful. For instance, one virtual server may handle Internet e-mail traffic and
another could be responsible for users directly transferring messages to the server with their Internet clients.
However, since there is only likely to be a single connection to the Internet (the question does not mention as
second connection) and the SMTP virtual server is very efficient, it is unlikely that adding a second machine as
a SMTP virtual server is the best use of server resources
D:It is a good idea to deploy Exchange 2000 Server in a Front-End/Back-End server arrangement if you want to
support a large number of users over the Internet. Front-end servers concentrate incoming client connections
and proxy them to the appropriate Back-End servers where the mailboxes reside. Since Front-End servers do
not host mailboxes, and there is no mention of users accessing mailboxes over the Internet, this answer is not
relevant.


MCSE Training Kit-Microsoft Exchange 2000 Server Implementation and Administration, Chapter 15 SMTP
Transport Configuration, Lesson 1: SMTP Configurations and Virtual Servers
MCSE Training Kit-Microsoft Exchange 2000 Server Implementation and Administration, Chapter 20
Microsoft Exchange 2000 Server Maintenance and Troubleshooting, Lesson 3: Backup, Restore, and Disaster
Recovery
MCSE Training Kit-Microsoft Exchange 2000 Server Implementation and Administration, Chapter 22
Microsoft Outlook Web Access, Lesson 2: Outlook Web Access Environments
QUESTION 3:
You are the Exchange Administrator for Alecnet .s Y our Windows 2000 domain includes two Exchange
2000 Server computers named Server1, and Server2. The databases are organized as shown in the
exhibit:
Anita is a user in the sales department. She has a mailbox on Server1. Two days ago, Anita deleted several
e-mail messages that she now wants to recover.
A support professional named Terry attempted to restore Anita's mailbox onto Server2. Terry restored
an online backup of DB1 onto Server2. He ran the Mailbox Cleanup Agent on the new copy of DB1, but
was unable to reconnect Anita's restored mailbox to another Active Directory user account.
You must recover the deleted items from Anita's mailbox. What should you do?
A.On Server2, dismount DB3, and then remount DB1. Run the Mailbox Cleanup Agent on Server2 again.


B.Install Exchange 2000 Server on a new computer that is in an isolated forest. Restore DB1 to the new server,
and connect Anita's mailbox to a new user account.
C.Promote Server2 to a Domain Controller. In the Active Directory Users and Computers console, select
Anita's account and move her mailbox to DB3.
D.Dismount DB1 on Server1, and then restart the information store service on Server2. Run the mailbox
cleanup Agent on Server2 again.
Answer: B
Explanation:
It is possible to restore databases to a different server in the same Exchange organization and administrative
group. This recovery strategy should only be used as a last resort if the original production server cannot be
restored and must be removed from the Exchange organization. If the original production server is still
available, your recovery server must not become part of your production Active Directory forest. It is
impossible to reconnect duplicated mailboxes to user accounts, which effectively prevents access to the restored
data. Furthermore, mailboxes must be unique in the forest. Consequently, it is vital to install the recovery server
in a separate forest and reconnect restored mailboxes to recovery accounts. A properly prepared recovery server
allows you to restore and mount databases from the production system. The mailboxes will be disconnected
because the original user accounts do not exist. You will have to create new accounts in the recovery forest and
reconnect the mailboxes. It is possible to use Active Directory Users and Computers as well as Exchange
System Manager for this purpose if you are only reconnecting a small number of users. Since this is the only
answer that uses a server located in a separate forest to perform the restore, this is the only possible answer.
Incorrect answers:
A:It is possible to restore databases to a different server in the same organization and administrative group. This
recovery strategy should only be used as a last resort if the original production server cannot be restored and
must be removed from the Exchange organization. Since the original server is in use then Anita's mailbox must
be restored to a recovery server that is not become part of the production Active Directory forest. Furthermore,
the Exchange 2000 Server Cleanup Agent would run typically at database maintenance intervals to check for
deleted mailboxes. Deleted mailboxes are not immediately removed but marked as disconnected. By default,
the Cleanup Agent purges them after 30 days. For recovery, they are retained as defined by the 'Keep Deleted
mailbox for (Days) ' parameter. there is no requirment to make the recovery server a Domain Controller; it
simply needs to be located in a separate forest to the production server.
C:It is possible to restore databases to a different server in the same organization and administrative group. This
recovery strategy should only be used as a last resort if the original production server cannot be restored and
must be removed from the Exchange organization. Since the original server is in use then Anita's mailbox must
be restored to a recovery server that is not become part of the production Active Directory forest.
D:It is possible to restore databases to a different server in the same organization and administrative group. This
recovery strategy should only be used as a last resort if the original production server cannot be restored and
must be removed from the Exchange organization. Since the original server is in use then Anita's mailbox must
be restored to a recovery server that is not become part of the production Active Directory forest. Furthermore,
dismounting the database on its home server is not sufficient to allow the database to be restored to another
server. The recovery server needs to be located in a separate forest to the production server.
MCSE Training Kit-Microsoft Exchange 2000 Server Implementation and Administration, Chapter 20
Microsoft Exchange 2000 Server Maintenance and Troubleshooting, Lesson 1: System Maintenance and
Monitoring
MCSE Training Kit-Microsoft Exchange 2000 Server Implementation and Administration, Chapter 20


Microsoft Exchange 2000 Server Maintenance and Troubleshooting, Lesson 3: Backup, Restore, and Disaster
Recovery
QUESTION 4:
You are the support professional for Alecnet .s T he network currently has no messaging software
installed. The administrator for the company's Windows 2000 domain adds your account to the Domain
Admins group. Group membership is now configured as shown in the following table.
Person Group membership
The administrator EnterpriseAdmins
Schema Admins
Domain admins
You Enterpriseadmins
Domainadmins
You are preparing to install Exchange 2000 Server on a computer named Server1 prior to installing
Exchange 2000 Server. You need to prepare the Windows 2000 domain. You need to minimize the
involvement of the administrator in this process.
What should you do?
A.RunDCPromoon Server1.
B.Ensure that the administrator runsDCPromoon Server1.
C.Runsetup /ForestPrepon a Domain Controller.
D.Ensure that the administrator runssetup /ForestPrepon a Domain Controller.
E.Ensure that the administrator runssetup /DomainPrepon a Domain Controller.
Answer: D.
Explanation:
Should your messaging management be separated from Windows 2000 administration, you need to ask the
Active Directory administrators to prepare the forest for you by launchingForestPrep. To runForestPrep
successfully, you need to be a member of the Enterprise Admins and Schema Admins groups and you need to
be a member of the local Administrators group on the computer where you are runningForestPrep. Since you
are not a member of the Schema Admins, and the administrator is as member this option is necessary.
Incorrect answers:
A, B:DCPromowill promote a server to a Domain Controller or demote a Domain Controller to a server. You
wish to install Exchange 2000 Server - this does not require the server to be a Domain Controller, so this is
unnecessary.
C:Inorderto run setup /ForestPrepyou need to be a member of both Schema Admins and Enterprise
Administrators. You are not a member of Schema Administrators so you could not run setup with this option E:
This option will prepare the domain but not the forest. Since you are Domain Admin, the administrator does
not
need to run this option. You are trying to minimize the administrator's involvement, so you should not select
this option
MCSE Training Kit-Microsoft Exchange 2000 Server Implementation and Administration, Chapter 4: Planning
the Microsoft Exchange Server 2000 Installation, Lesson 2: Preparing the Server installation


QUESTION 5:
You are the Exchange Administrator forContoso, Ltd. During the past six months, the company added
six regional offices throughout the country. There are plans to open an additional six regional offices
during the next six months.
The users at the regional offices access their mailboxes by using Microsoft Outlook Web Access. Your
current environment is configured as shown in the exhibit:
You need to configure the Outlook Web Access server or servers to provide fault tolerance, the highest
level of network security, and encrypted connections.
What should you do?
A.Install two Front-End Exchange 2000 Server computers. Place the new server on the perimeter network.
Configure load balancing between the two servers. Configure certificate servers, and create a rule on the
firewall to redirect port 443 to the servers.
B.Install one Front-End Exchange 2000 Server computer and continue to run Outlook Web Access on the
existing Exchange Server. Place the new server on the perimeter network. Configure unique URLs to connect to
each server. Configure certificate servers, and create a rule on the firewall to redirect port 443 to the servers.
C. Install two Exchange 2000 Server computers. Place the new server on the perimeter network. Configure
unique
URLs to connect to each server. Configure certificate services on the servers. Create a rule on the firewall to
redirect port 443 to the servers.
D.Install two Front-End Exchange 2000 Server computers. Place the new server on the internal network.
Configure load balancing between the two servers. Configure certificate services on the servers. Create a rule
on the firewall to redirect port 443 to the servers.
Answer: A
Explanation:
Typically, you do not maintain internal data, such as user mailboxes, on systems in the DMZ. Those servers
need to be configured as Front-End servers relaying client access to Back-End systems where the actual user


mailboxes reside. You may find it useful to configure multiple virtual protocol servers on computers in the
DMZ. In a Front-End/Back-End environment, you can group all your Front-End systems together for load
balancing using Microsoft Network Load Balancing.The Front-End server looks up the mailbox location using
Active Directory. You can move mailboxes between servers without changing the URL that users use to access
their mailboxes, because the name of the actual mailbox or public store is not relevant. Therefore configuring
two Front-End servers with load-balancing provides fault tolerance. You should only allow systems in the DMZ
to communicate with internal systems over the firewall. Therefore the perimeter network (DMZ) is the correct
location for Front-End servers.All incoming connections must pass through the firewall. In addition, it is a good
idea to enable Secure Sockets Layer (SSL)-based encryption for client connections. For instance, you should
require SSL encryption for Outlook Web Access (OWA) to the Front-End server(s). SSL uses TCP port 443,
therefore, to implement SSL you would be required to open TCP port 443 on the firewall.
Incorrect answers:
B, C:If you configure unique URLs to access each server then this will not provide fault tolerance, since clients
will need to change their settings to access each server.
D:Front-End servers should be placed on the Perimeter Network not the internal network.
MCSE Training Kit-Microsoft Exchange 2000 Server Implementation and Administration, Chapter 22
Microsoft Outlook Web Access, Lesson 2: Outlook Web Access Environments
MCSE Training Kit-Microsoft Exchange 2000 Server Implementation and Administration, Chapter 19
Implementing Advanced Security, Lesson 1: Exchange 2000 Server Security
QUESTION 6:
You are the administrator for Windows 2000 network at Alecnet .s N etwork responsibilities are
divided between two teams named Administrators and Support Professionals.You're the member of
administration team. Group membership and job responsibilities are organized as shown in the following
table:
Your network currently has no messaging software installed. Julia, a member of the Support
Professionals team, is installing the network's first Exchange 2000 Server computer. Julia reports that
during the installation of Exchange 2000 Server, she was not able to install the Microsoft Exchange
Messaging and Collaboration Services component.
You must enable Julia to install this component. What should you do?
A.Runsetup /ForestPrep.
B.Runsetup /DomainPrep.
C.Promote the Exchange server to a Domain Controller in the existing domain.
D.Promote the Exchange server to a Domain Controller in the new domain.
Answer: A.
Explanation:
Should your messaging management be separated from Windows 2000 administration, the Active Directory
administrators need to prepare the forest by launchingForestPrep. To runForestPrepsuccessfully, you need to be
a member of the Enterprise Admins and Schema Admins groups and you need to be a member of the local


Administrators group on the computer where you are runningForestPrep. Since Julie is a member of the Support
Professionals security group, and Support Professionals are not Schema Admins but you are as a result of your
Administrators security group membership you need to run setup /ForestPrep.
Incorrect answers:
B:This option will prepare the domain but not the forest. Since Julie is a Domain Admin, you do not need to run
this option. Since Julie is not a Schema Admin somebody who is a member of both Schema Admins and
Enterprise Administrators must run setup /ForestPrepbefore Julie can proceed.
C, D:You already have an existing Windows 2000 domain, since you have Schema and Enterprise Admins, so
therefore you must already have Domain Controllers, so an additional Domain Controller in the existing or in a
new domain is not required. Since Julie is not a Schema Admin somebody who is a member of both Schema
Admins and Enterprise Administrators must run setup /ForestPrepbefore Julie can proceed.
MCSE Training Kit-Microsoft Exchange 2000 Server Implementation and Administration, Chapter 4: Planning
the Microsoft Exchange Server 2000 Installation, Lesson 2: Preparing the Server installation
QUESTION 7:
You are the Exchange Administrator for Alecnet .s Y ou manage three Exchange 2000 Server
computers. The hard disk on one of the servers fails. You have an online backup of the Exchange
databases on that server. You repair the faulty hardware and restart Windows 2000 Server on the failed
server.You must restore the Exchange server's configuration from the Active Directory and restore the
mailbox and
public folder store data.
What should you do before mounting the databases?
A.Runsetup /DomainPrep.
Restore the databases from the online backup, and then runISINTEG -patch.
B.Runsetup /DomainPrep.
Restore the databases from the online backup, and select theLast Restore Setcheck box.
C.Runsetup /DisasterRecovery.
Restore the databases from the online backup, and runISINTEG -patch.
D.Runsetup /DisasterRecovery.
Restore the databases from the online backup, and select theLast Restore Setcheck box.
Answer: D
Explanation:
When you run Setup.exe with the /DisasterRecoveryoption, Exchange 2000 restores executable files and system
settings without disturbing the existing Active Directory information for the system, such as mailbox and public
stores. Setup in disaster recovery mode installs Exchange 2000 without resetting the server's configuration to
defaults, but instead, leaves the server in its last configuration. Setup /DisasterRecoverywill reconfigure the
local server, including program files, registry settings, and database paths. If you are restoring a full backup
without any incremental backups, click Last restore set to start the log file after restoring the database. If you
are restoring a backup with incremental backups, do not select this option until you restore the last incremental
backup. Therefore this is the best solution.
Incorrect answers:
A, B:DomainPrepis run once per domain to create the public folder proxy container and set permissions within
the domain. Since you are planning to restore information from Active Directory, at least one Domain
Controller must exist. Therefore this step is unnecessary as Active Directory has previously been configured by


running setup /DomainPrepand contains the changes that this originally made.
C:The-patchparameter of theISINTEGutility is typically used in earlier versions of Exchange Server after
restoring from an offline backup inorderto replace globally unique identifiers (GUIDs
its function is not related to the problem described in this scenario.
MCSE Training Kit-Microsoft Exchange 2000 Server Implementation and Administration, Chapter
20 Microsoft Exchange 2000 Server Maintenance and Troubleshooting, Lesson 3: Backup, Restore, and
Disaster Recovery
Microsoft Exchange 2000 Server Resource Kit -EnterpriseDeployment Guide, Active Directory Integration and
Replication, Coexistence and Upgrading
Microsoft Exchange 2000 Server Resource Kit - Resource Guide, Chapter 28 Backup and Restore, Recovering
from Disasters
Microsoft Exchange 2000 Server Resource Kit - Resource Guide, Chapter 28 Backup and Restore, Database
Consistency
QUESTION 8:
You are the administrator of an Exchange 2000 Server organization that spans eight Windows 2000
domains. Two recently installed child domains do not contain an Exchange 2000 Server computer. You
create user accounts that are mailbox enabled in the new domains, but other users report that the new
mailboxes do not appear in the Global Address List.
What should you do to resolve the problem?
A.Place a Domain Controller from each of the new child domains in the same Windows 2000 site as the
Exchange Server.
B.Runsetup /ForestPrepin each domain that does not have an Exchange 2000 Server computer.
C.Configure a recipient update service for each new domain.
D.Configure a recipient update service to use a global catalog server in the root domain.
Answer: C
Explanation:
When creating new mailbox- or mail-enabled recipient objects or when updating existing e-mail addresses,
there may be a delay before the addresses are displayed correctly. The Recipient Update Service, an internal
process of the System Attendant, handles the process of updating in the background. The Recipient Update
Service is also responsible for updating address lists in Active Directory. Because a particular Recipient Update
Service keeps only a particular domain posted, you need to configure an individual update service object for
each domain in your organization that holds recipient objects. If you install at least one Exchange 2000 Server
in all of your domains, the required objects are created automatically. If domains without an Exchange 2000
Server exist, you need to perform this task manually.
Incorrect answers:
A:Windows 2000 uses sites and replication change control to optimize replication. Placing a child Domain
Controller in the same site as an Exchange 2000 Server will ensure directory information is replicated
frequently and automatically, but this will not include Exchange 2000 recipient information, which is handled
by the recipient update service.
B:Launched using the /ForestPrepswitch, the Setup program extends the Active Directory Schema to add
Exchange-specific classes and attributes. These extensions affect the entire forest and so only are only required
to be installed once. If Exchange 2000 is already installed, all changes made by using the /ForestPrepswitch will


already have been made.
D:By default, a global catalog is created automatically on the initial Domain Controller in the forest. It stores a
full replica of all objects in the directory for its host domain and a partial replica of all objects contained in the
directory of every other domain in the forest. However, the Global Catalog will rely on the recipient update
service creating the recipient information prior to it being made available throughout the forest.
MCSE Training Kit-Microsoft Exchange 2000 Server Implementation and Administration, Chapter 13 Creating
and Managing Recipients, Lesson 2: Mailbox and Resource Management
Windows 2000 Help, Active Directory, Concepts, Understanding Active Directory, Active DirectoryDirectory
Service, Replication
MCSE Training Kit-Microsoft Exchange 2000 Server Implementation and Administration, Chapter 4 Planning
the Microsoft Exchange 2000 Server Installation, Lesson 2: Preparing the Server Installation
QUESTION 9:
You are the administrator for Alecnet .s Y ou currently made a Windows NT 4.0 domain with
no messaging software installed. You are planning to install Exchange 2000 Server in your
network.
You must prepare your network for the installation of Exchange 2000 Server on a new Server computer
named Server1. You want to take only the steps necessary for a typical installation of Exchange 2000
Server in your network.
Which three actions should you take? (Each correct answer presents part of the solution Choose three.)
A.Upgrade the PDC to Windows 2000.
B.Upgrade the BDC to Windows 2000
C.Install Windows 2000 server on Server1.
D.Install the NNTP service on Server1.
E.Create an NTFS partition on Server1, and designate the partition as drive M.
F.Install Active Directory connector (ADC) on a Domain Controller.
Answer: A, C, D
Explanation:
Exchange 2000 Server can be installed on Microsoft Windows 2000 Server, Windows 2000 Advanced Server,
or Windows 2000 Datacenter Server with Service Pack 1. It is important to note that the Internet Information
Services (IIS) 5.0 with SMTP and Network News Transfer Protocol (NNTP) service must be installed prior to
launching the Exchange 2000 Setup program. The NNTP service is not part of the IIS 5.0 default installation.
To avoid the installation of separate Windows 2000 domains, consider upgrading the PDC(s) in your domain
environment directly. This is probably the easiest upgrade method because it preserves all account information,
including the original security identifiers (SIDs). A SID is a value that uniquely identifies a user account and is
used by Windows 2000 to determine access permissions. Active Directory supports mixed networks containing
computers running Windows NT Server 4.0 and Windows 2000 Server, so you don't need to upgrade all
operating systems at once before installing Exchange 2000 Server
Incorrect answers:
B:Upgrading the BDC to Windows would first require an upgrade of the PDC to Windows 2000. After the PDC
has been upgraded to Windows 2000 there is no requirement to upgrade Backup Domain Controllers (BDCs) to
Windows 2000 inorderto install Exchange 2000. You only want to take the steps necessary so this answer is
incorrect, so this answer is incorrect.
E:Exchange 2000 requires an NTFS partition, but by default, Exchange 2000 Server maps the local M drive to
the Exchange Installable File System (ExIFS). If M is already in use, the next available drive letter is taken.


You only want to take the steps necessary so this answer is incorrect.
F:To ensure a common Global Address List for all users, whether they still reside on Exchange Server 5.5 or
are migrated to Exchange 2000 Server, you need to synchronize the directories with each other. To enable
directory synchronization, install the Active Directory Connector (ADC) and configure user connection
agreements. Since there is no existingmessageingsoftware installed, this is not required. You only want to take
the steps necessary so this answer is incorrect.
MCSE Training Kit-Microsoft Exchange 2000 Server Implementation and Administration, Chapter 4 Planning
the Microsoft Exchange 2000 Server Installation, Lesson 2: Preparing the Server Installation, Software
Requirements
MCSE Training Kit-Microsoft Exchange 2000 Server Implementation and Administration,
Chapter 6 Coexistence with Previous Microsoft Exchange Server Versions, Lesson 1: Preparation of Exchange
Server Environments, Preparing the Windows Environment
MCSE Training Kit-Microsoft Exchange 2000 Server Implementation and Administration, Chapter 23:
Microsoft Exchange 2000 Microsoft Web Storage System, Lesson 1: The Microsoft Web Storage System,
Exchange Installable File System
QUESTION 10:
You are the administrator of the messaging environment at Alecnet .s Y ou have one Windows
2000 domain, consisting of four Exchange Server 5.5 computers. These servers also coexist with the
IBM PROFS. The configuration of the Exchange Server 5.5 connectors is shown in the exhibit:
Due to budget constraints, you are able to upgrade only two servers to Exchange 2000 Server. After the
upgrade, the users in each site must be able to exchange e-mail messages, must have access to internet
e-mail, and must be able to exchange e-mail messages with the PROFS mail users. Administrators must
be able to manage exchange objects in both sites in System manager from one of the servers in Site 1.
What should you do??
A.Perform an in place upgrade to Windows 2000 and Exchange 2000 Server on Server 3 and Server 4.
B.Perform an in place upgrade to Windows 2000 and Exchange 2000 Server on Server 2 and Server 3.
C.Perform an in-place upgrade to Windows 2000 and Exchange 2000 Server on Server 4, and upgrade to
Exchange 2000 Server on Server 1.
D.Perform an in place upgrade to Windows 2000 and Exchange 2000 Server on Server 2, and upgrade to
Exchange 2000 Server on Server 1.
Answer: B.

Explanation:
To support Exchange Server 5.5, Windows 2000 provides a basic ADC version. The ADC of Exchange 2000
Server comes with enhanced functionality for replicating configuration and routing information. For best
performance, upgrade all ADC installations to the version that comes with Exchange 2000 Server. To take
advantage of the advanced replication of configuration and routing information you should configure at least
one Exchange 2000 ADC in each site which requires at least one Exchange 2000 Server in each site. Since you
must administer Exchange Server 5.5 using the Exchange Administrator program and you wish to administer
objects in both sites using Exchange System Manager, one system in each site must be Exchange 2000 Server.
Administrators can only manage objects (Exchange 2000 resources) in both sites by use of the Exchange
System Manager if each site contains an Exchange 2000 Server installation. Internet connectivity will remain
available through the existing Internet Mail Connector (IMC) install on Server 1. Connectivity to the PROFS
system will be available through the PROFS connector on Server 4. Sites will be able to exchange e-mail
through a Routing Group Connector (RGC), SMTP Connector, or X.400 Connector running on servers 2 and 3.
This answer therefore fulfils each of the requirements and so is correct.
Incorrect answers:
A, C:Exchange 2000 does not provide connectors to an environment currently utilizing Professional Office
Systems (PROFS). In these situations, you may use connectors installed on computers running Exchange Server
5.5, provided you operate your Exchange 2000 organization in mixed mode. In this way, you have the option to
use the PROFS /OV connector of Exchange Server 5.5 to provide connectivity to PROFS systems. If Server 4 is
upgraded to Exchange 2000 then this will no longer be capable of connecting to the PROFS system. Since the
question states 'you must be able to exchange e-mail messages with the PROFS system', these two answers are
incorrect
D:You must administer Exchange Server 5.5 using the Exchange Administrator program. Exchange 2000
Server is managed using the Exchange System snap-in and other Microsoft Management Console (MMC)
snap-ins. When displaying the configuration of the organization in the Exchange System snap-in, resources of
previous Exchange versions are shown as transparent objects - the Exchange System snap-in displays the
information as read-only and prevents you from changing settings. So administrators can only manage objects
(Exchange 2000 resources) in both sites by use of the Exchange System Manager if each site contains an
Exchange 2000 Server installation. By upgrading both servers in just one site you will not be able to manage
Exchange 2000 resources in each site since the site containing Server 3 and Server 4 contain no Exchange 2000
Server resources, and so cannot be managed by Exchange System Manager. Therefore this answer is incorrect.
MCSE Training Kit-Microsoft Exchange 2000 Server Implementation and Administration, Chapter 1
Introduction to Microsoft Exchange 2000 Server, Lesson 3: Backward Compatibility and Interoperability
MCSE Training Kit-Microsoft Exchange 2000 Server Implementation and Administration, Chapter 6
Coexistence with Previous Microsoft Exchange Server Versions, Lesson 1: Preparation of Exchange Server
Environments
MCSE Training Kit-Microsoft Exchange 2000 Server Implementation and Administration, Chapter 6
Coexistence with Previous Microsoft Exchange Server Versions, Lesson 2: Upgrade and Migration Strategies
MCSE Training Kit-Microsoft Exchange 2000 Server Implementation and Administration, Chapter 16 Message
Routing Administration, Lesson 2: Connecting Routing Groups
QUESTION 11:
You are the Exchange Administrator for Alecnet .s Y ou manage several Exchange 2000 Server
computers in your network. When you review the event logs for one of your servers, you find several
-1018 ESE error messages reporting transient faults when reading from the administration mailbox store


database. However, the users have not reported any problems connecting to their mailboxes. You notice
that this string of error messages occurs nearly every morning.
You need to resolve this problem without damaging the contents of the administration mailbox store.
What should you do?
A.Repair and upgrade the disk subsystem hardware, and restore the database files from backup.
B.Dismount the administration mailbox store, and then run ESEUTIL /CC on the database. Remount the
mailbox store.
C.Stop the information store service, and then manually truncate the log files for the database. Restart the
information store service.
D.Reinstall Exchange 2000 Server by runningsetup /DisasterRecovery.
Answer: A.
Explanation:
When performing backup and restore, you receive an Event ID 1018: Database is damaged error message (The
only error that can be relied on to prove damage is the repeatable error message -1018.). This means that the
restore process from the online backup cannot complete because the database is damaged. In such an event you
should check the hardware for errors and perform a restore of this database as soon as possible. You can
perform an offline backup so you have a recent copy of the database on tape even though it is damaged. You
should never delete logs from the system when performing an offline backup. The logs are required if you want
to restore from the online backups.
Incorrect answers:
B:The ESEUTIL /CC option is used after a restore operation has been performed and you have forgotten to
select the 'Last Backup Set' check box. In this situation, Exchange System Manager will not mount restored
databases and will report an internal processing error. You can restore the last backup set again with 'Last
Backup Set' activated, or you can run a hard recovery manually. To run a hard recovery manually, open the
Windows 2000 command prompt, switch to the temporary folder of the transaction log files (where
RESTORE.ENV exists), and then type "c:\Program Files\Exchsrvr\Bin\eseutil" /CC. However, the error
suggests a hardware error, which you have not checked for so this answer is incorrect.
C:Manually truncating the log files will not resolve the database errors, but will prevent you from restoring
from the online backups, so this answer is incorrect.
D:The database is damaged. Reinstalling Exchange 2000 will not resolve this problem. This answer would be
useful where Exchange binary files were damaged, but this situation requires a restore of database files from
backup.
MCSE Training Kit-Microsoft Exchange 2000 Server Implementation and Administration, Chapter 20:
Microsoft Exchange 2000 Server Maintenance, Lesson 3: Backup, Restore, and Disaster Recovery.
Exchange 2000 Resource Kit - Resource Guide, Chapter 28: Backup and Restore, Best Practices
Exchange 2000 Resource Kit - Resource Guide, Chapter 33: Troubleshooting, Backup and Restore Problems.
QUESTION 12:
You are the Exchange Administrator for Alecnet .s Y ou currently use Exchange Server 5.5 in your
Windows 2000 domain. You have one site on the Exchange Server 5.5 organization, and you have two
Exchange Server 5.5 computers in that site, named Server1 and Server2.
You plan to install a new Exchange 2000 Server computer named Server3 into the existing Exchange
Server 5.5 site. The proposed network is shown in the exhibit:


You plan to have mailboxes in all three Exchange servers. To simplify administration, you must be able
to manage all Exchange mailboxes and user accounts from the Active Directory Users and Computers
console. You need to configure the server so that changes made in Active Directory are reflected on the
Exchange Server 5.5 computers.
Prior to installing Server3, what should you do?
A.In Active Directory, create an organization unit (OU) that has the same name as the Exchange Server 5.5 site.
Move all the Exchange Server 5.5 user accounts into the new OU.
Delegate Full Administrator permission on that OU to the Exchange Server 5.5 service account.
B.In Active Directory Connector (ADC), create a two-way Connection Agreement between Server 4 and
Server1.
Connect the Connection Agreement to the recipients container in the Exchange Server 5.5 site.
C.In the Active Directory Connector (ADC), create a one-way Connection Agreement from Server1 to Server4.
Connect the Connection Agreement to the recipients container in the Exchange Server 5.5 site.
D.Upgrade Server1 to Windows 2000, and promote Server1 to a Domain Controller.
In the Active Directory, create an organizational unit (OU) that has the same name as the Exchange Server 5.5
site.
Move all of the Exchange Server 5.5 user accounts into the new OU.
Answer: B
Explanation:
To ensure a common Global Address List for all users, whether they still reside on Exchange Server 5.5 or are
migrated to Exchange 2000 Server, you need to synchronize the directories with each other. To enable directory
synchronization, install the Active Directory Connector (ADC) and configure user connection agreements.
Connection agreements can replicate recipient and public folder information between Exchange Server 5.5 and
the Global Catalog. As soon as the Windows NT user accounts are migrated to Active Directory, you need to
synchronize the accounts with their corresponding mailbox information using an ADC connection agreement.
Directory synchronization is performed between the Global Catalog and the Exchange directory service. To
centrally manage all objects perform two-way replication to every Exchange site.
Incorrect answers:
A:By creating an OU with the same name as the Exchange 5.5 site and moving user accounts you will not be


replicating Exchange 5.5 directory data, but simply modifying the Active Directory structure. By modifying
permissions that the Exchange 5.5 Service account has on the OU, you will not be granting the Exchange 5.5
directory any rights over the OU, but simply granting the account it uses rights on the OU. Without an ADC
Exchange 5.5 will be unable to communicate with Active Directory. Therefore this answer is not the best
solution
C: If you want to upload Exchange 5.5 directory data to Active Directory, configure a one-way connection
agreement from Exchange. Because the ADC will not need to write information back to the Exchange 5.5
directory, recipient containers from multiple Exchange sites can be pulled through a single agreement.
Similarly, if you wish to upload Active Directory data to the Exchange 5.5 directory configure a one-way
connection agreement from the Active Directory. However, since you want to be able to centrally manage data
you will need a two-way connection to replicate the Exchange 5.5 directory to Active Directory and to replicate
changes to Active Directory back to the Exchange 5.5 directory. Therefore this answer is not the best solution.
D:To avoid the installation of separate Windows 2000 domains consider upgrading the PDC(s) in your domain
environment directly. This is probably the easiest upgrade method because it preserves all account information,
including the original security identifiers (SIDs). However, you don't need to upgrade your entire Windows NT
4.0 environment to Windows 2000 to upgrade to Exchange 2000 Server. By creating an OU with the same
name as the Exchange 5.5 site and moving user accounts you will not be replicating Exchange 5.5 directory
data, but simply modifying the Active Directory structure. Without an ADC Exchange 5.5 will be unable to
communicate with Active Directory. Therefore this answer is not the best solution
MCSE Training Kit-Microsoft Exchange 2000 Server Implementation and Administration, Chapter 6
Coexistence with Previous Microsoft Exchange Server Versions, Lesson 1: Preparation of Exchange Server
Environments
The Microsoft Exchange 2000 Server Resource Kit, TheEnterpriseDeployment Guide, PART 2 Planning for
Exchange 2000 and Active Directory, Chapter 5 Active Directory Integration and Replication, Coexistence and
Upgrading
QUESTION 13:
You are the Exchange Administrator for Alecnet .s U sers in the Exchange organization access their
e-mail by using Microsoft Outlook 2000, IMAP, and HTTP. The network is configured as shown in the
exhibit:


Many of your users read their e-mail from the Internet by connecting to an Exchange 2000 Server
computer that is a Front-End server located outside of the firewall. These remote users are using IMAP4
and HTTP in Windows 98 and Windows NT 4.0 client computers.
When you run network monitor, you are able to view the HTTP and IMAP4 e-mail messages in addition,
you are able to view the user names and passwords when users are reading their e-mail from the
Internet.
You need to prevent unauthorized users from viewing the e-mail messages, user names, and passwords.
Which two actions should you take? (Each correct answer presents part of the solution. Choose two)
A.Use the Internet Services Manager console to disable Basic Authentication for the web server that supports
the HTTP users.
B.Use the Internet Services Manager console to configure a server's e-mail settings for Base64 encoding.
C.Use the Internet Services Manager console to configure a server certificate for the web server and redirect all
HTTP communications to the secure web server.
D.Use the Exchange System Manager console to disable authentication for the IMAP4 virtual server.
E.Use the Exchange System Manager console to configure a server certificate for the IMAP4 virtual server and
require a secure channel.
F.Use the Exchange System Manager console to explicitly deny the ANONYMOUS LOGON user the Read
permission.
Answer: C, E
Explanation:
This question requires that you prevent unauthorized users from viewing e-mail messages, usernames and
passwords. You can achieve by using a secure web server for all HTTP traffic. This will ensure that all HTTP
traffic will be encrypted. Inorderto use a secure web server you need to request and install a Certificate. By
using a secure channel all IMAP traffic will be encrypted. Inorderto use a secure channel you also need to
request and install a Certificate.


Incorrect answers:
A:By default, Basic Authentication is enabled. When Basic Authentication is enabled, clients are not forced to
encrypt the username or password. If an unauthorized user can watch the communication between a client and
the server, this user can get access to authorized users' account information. It is advisable to disable Basic
Authentication, but alternatively, you may enforce the encryption of the communication channel. The option to
disable Basic Authentication would prevent the username and password from being sent in plain text, but would
not stop e-mail messages from being intercepted and read. Therefore, this is not the best solution.
B:You can use MIME Base64 encoding, which replaced the legacy Unix-to-Unix encoding method
(UUENCODE), and plain text, to encode data using Internet standard transfer formats. Encoding is used to
place data into a stream of bits for external storage or transmission, not to protect and prevent access to the
contents. This answer is therefore incorrect.
D:By disabling access to the IMAP Virtual server you will prevent users from connecting via IMAP. This is not
the objective and is therefore incorrect.
F:All access to mailbox and public folder resources is validated, although you have the option to allow
anonymous access to public folders. If the users used Anonymous (The Anonymous account corresponds to the
Anonymous Logon system account of Windows 2000) then they would not be able to access their own
mailboxes. Since all users are accessing mailboxes they will be authenticated using their own logon
information. This solution would therefore achieve nothing.
MCSE Training Kit-Microsoft Exchange 2000 Server Implementation and Administration, Chapter 11:
Internet-Based Virtual Protocol Servers, Lesson 2 Configuring Virtual Protocol Servers
MCSE Training Kit-Microsoft Exchange 2000 Server Implementation and Administration, Chapter 22:
Microsoft Outlook Web Access, Lesson 2: Outlook Web Access Environments
MCSE Training Kit-Microsoft Exchange 2000 Server Implementation and Administration, Glossary, Basic
Encoding Rules (BER)
QUESTION 14:
You are the Exchange Administrator for Alecnet .s Y ou are setting up a new Exchange 2000
Server environment to support 10,000 IMAP users.
You are adding 12 new Server computers to Alecnet 'ss network. You need to configure the
Exchange environment for standardized client configuration. You do not want the user mailbox servers
to perform authentication.
What should you do?
A.Install four Windows 2000 Domain Controllers.
Install eight Exchange 2000 mailbox member servers.
Configure load balancing among the Exchange servers.
B.Install 12 Windows 2000 Domain Controllers.
Install Exchange 2000 Server on six of these Domain Controllers.
Configure load balancing among the Exchange servers.
C.Install six Windows 2000 Domain Controllers.
Install Exchange 2000 Server on two of these Domain Controllers, and configure them as Front-End servers.
Install the Exchange 2000 mailbox member servers.
Configure load balancing between the Exchange Front-End servers.
D.Install two Windows 2000 Domain Controllers.
Install the Exchange 2000 mailbox member servers.
Configure load balancing among the Exchange Front-End servers.


Answer: D
Explanation:
Two Domain Controllers is sufficient for fault tolerance. We should not use Domain Controllers as Front-End
servers.
Note:
There are 2 requirements (i) that client configuration is standardized and (ii) that mailbox servers do not
perform authentication
(i) As multiple Back-End servers are configured to handle additional mailboxes, it is desirable to refer to all of
the servers with a single name. You can refer to a Front-End server with a single name and it can proxy user
requests to the correct Back-End server containing that user's mailbox. Using Front-End server therefore allows
you to standardize client configuration.
(ii) You do not want mailbox servers to authenticate users, there fore you should ensure that Domain
Controllers are not located on mailbox servers.
This answer satisfies both (i) and (ii).
Incorrect answers:
A, B:Without a Front-End/Back-End configuration each client would need to be configured to connect to their
mailbox server directly. Client configuration would not be standardized, so this answer is incorrect
C:We don't need six Domain Controllers. Furthermore, it is not best practice to use Domain Controllers as
Front-End servers.
Exchange 2000 Resource Kit - Resource Guide, Chapter 26:Exchange 2000 Architecture, Outlook Web Access
Architecture
QUESTION 15:
You are the Exchange Administrator for Alecnet .s Y ou are using Exchange 2000 Server on
your network. You plan to deploy messaging client software for your users.
Alecnet hs a s four departments, named Sales, Administrative, Manufacturing and Technical. All users in
Sales are mobile. Users in the other departments work only in the office.
You want to accomplish the following goals:
üAll Sales users must be able to access their mailboxes from the Internet.
üAdministrative users must be able to access public folders and calendaring.
üManufacturing users must be prevented from accessing calendaring components.
üTechnical users must be able to access public folders.
üAll users must be to access their mailboxes.
You deploy the client software as shown in the exhibit as shown in the following table:
Which result or results do these actions produce? (Choose all that apply)
A.All Sales users can access their mailboxes from the Internet.
B.Administrative users can access public folders and calendaring.
C.Manufacturing users are prevented from accessing calendaring components.
D.Technical users can access public folder.


E.All users can access their mailboxes.
Answer: A, C, D
Explanation:
Outlook Web Access is enabled for Sales, which allows all Sales users to access their mailboxes over the
Internet. The magic of OWA lies in its platform-independent Web browser support. You can gain access to
Microsoft Exchange 2000 Server via any browser that supports JavaScript and frames.
IRC was first developed to allow users of bulletin board systems (BBSs) to communicate with each other. In the
1990s, it became a popular real-time communication method on the Internet. Users log on to a chat server and
select a discussion group (a chat channel). IRC does not provide access to calendaring.
Microsoft Outlook provides access to public folders.
Incorrect answers:
B:POP3 is a messaging protocol that defines commands to download messages from a host. In other words, it is
a read-only protocol allowing you to download messages from your server-based Inbox only. Access to other
server-based message folders is not possible. IRC users log on to a chat server and select a discussion group (a
chat channel). Neither POP3 nor IRC provides access to public folders or calendaring.
E:The manufacturing department is provided access only via IRC. However,IRC does provide mailbox access.
MCSE Training Kit-Microsoft Exchange 2000 Server Implementation and Administration, Chapter 11:
Internet-Based Client Access, Lesson 1: Support for Internet Protocols
MCSE Training Kit-Microsoft Exchange 2000 Server Implementation and Administration, Chapter 22:
Microsoft Outlook Web Access, About This Chapter
MCSE Training Kit-Microsoft Exchange 2000 Server Implementation and Administration, Chapter 25:
Real-Time Collaboration, Lesson 2: Chat Services
QUESTION 16:
You are the Exchange Administrator for Alecnet .s Y our network is configured as shown in the exhibit:
You need to configure your network to show users to connect to their mailboxes by using Microsoft
Outlook Web Access.
What should you do?
A.Configure the firewall to allow port 80 of the Outlook Web Access server to communicate with port 80 of the
Exchange 2000 Server computer.
B.Configure the firewall to allow port 443 of the Outlook Web Access server to communicate with port 443 of
the Exchange 2000 Server computer.
C.Move the Outlook Web Access server to the perimeter network, and change the IP address of the server
10.10.1.15.
Reinstall Exchange 2000 Server and configure the computer as a Front-End server.
Configure the firewall to allow port 443 into the Front-End server from the Internet.
D.Move the Outlook Web Access server to the perimeter network, and change the IP address of the server to
10.10.10.15.
Configure the Outlook Web Access server as a Front-End server.
Configure the firewall to allow port 443 into the Front-End server from the Internet.
Answer: D
Explanation:
Outlook Web Access is automatically installed when you install Exchange 2000. When the number of people
who use the server grows, IIS must process more protocol requests on HTTP. The server that contains the
mailbox stores and public folder stores is called a Back-End server. The role of a Front-End server is to
communicate directly with the clients' browsers and relay requests to Back-End servers.
The Front-End and Back-End architecture is useful when enabling users to retrieve their mail from the Internet.
A Front-End server can be placed behind or in front of a firewall, or a perimeter network, also called a
demilitarized zone (DMZ). The Front-End server should be configured to use SSL to encrypt data and
passwords between the client and the front-End server; otherwise passwords and data travel as clear text. When
SSL is enabled, secure HTTP, i.e., HTTPS is used by Outlook Web Access (OWA) clients to access the
Front-End server. HTTPS requires TCP port 443 to provide secure access to the Front-End server.
This answer follows the recommendations above. In addition, the IP address must be changed to a valid DMZ
address - 10.10.10.15 is valid on the DMZ.
Incorrect answers:
A:The Microsoft Web Storage System includes native HTTP access and manages data for Exchange. Every
object within the Web Storage System is URL-accessible with short, easily understood names. Because the
Web Storage System stores data in its native format, no data conversion is necessary, and therefore data can be
quickly retrieved. However, it is recommended that the Outlook Web Access server is placed behind the
firewall, to protect the server and the communication between the OWA server and the Back-End / mailbox
server. Therefore this answer is not the best solution.
B:HTTPS uses TCP port 443 to provide Outlook Web Access (OWA) clients secure access to the Front-End
server. The Front-End server does not use HTTPS to communicate with the Exchange 2000 Server and would
thus not require port 443. Therefore this answer would achieve nothing and is not required.
C:It is not necessary to reinstall Exchange 2000 inorderto configure a server as a Front-End server. To
configure a server as a Front-End server, open Exchange System Manager, open Server Properties, and then
select 'This is a Front-End server'. Dismount and remove the mailbox stores and public folder stores, and then
restart the computer.
Exchange 2000 Resource Kit - Resource Guide, Chapter 25: Outlook Web Access, Deployment Planning, Load
Balancing and Fault Tolerance
Exchange 2000 Resource Kit - Resource Guide, Chapter 25: Outlook Web Access, Front-End and Back-end Server Architecture, Configuring Front-End Servers

Go Back to the Braindumps Page

Go Back to the Braindumps Page