Troubleshooting Microsoft Exchange Online v1.0
Question 1
HOTSPOT -
A company uses Exchange Online. The company creates dynamic distribution groups for managers of each department.
A manager reports that some of the users in their department are not receiving emails when sending messages to a dynamic distribution group named Group1.
You need to provide a membership list of Group1 to the manager.
How should you complete the command? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer : 
Box 1: Get-Recipient -
Use the Exchange Management Shell to view the members of a dynamic distribution group
To view the members of a dynamic distribution group, use the following syntax:
$<VariableName> = Get-DynamicDistributionGroup -Identity <DynamicDistributionGroupIdentity>
Get-Recipient -RecipientPreviewFilter ($<VariableName>.RecipientFilter)
Box 2: -RecipientPreviewFilter -
Box 3: RecipientFilter -
Reference: https://docs.microsoft.com/en-us/exchange/recipients/dynamic-distribution-groups/view-dynamic-distribution-group-members
Question 2
A university uses Exchange Online.
Students must be able to find email addresses for other students in the university’s address book.
You need to prevent students from finding faculty email addresses in the address book.
You create and assign an address book policy (ABP).
Which cmdlet should you use to enable ABP routing?
- A. Set-FrontendTransportService
- B. Set-MailboxTransportService
- C. Set-TransportConfig
- D. Set-TransportService
Answer : C
Use Exchange Online PowerShell to turn on ABP routing
To enable ABP routing in the Exchange Online organization, run the following command:
Set-TransportConfig -AddressBookPolicyRoutingEnabled $true
Reference: https://docs.microsoft.com/en-us/exchange/address-books/address-book-policies/turn-on-address-book-policy-routing
Question 3
A company uses Exchange Online. The company enables modern authentication.
Users report that Microsoft Outlook continuously prompts for credentials.
You need to ensure that users can authenticate successfully.
Which registry key should you configure on the client computers?
- A. AlwaysUseMSOAuthForAutoDiscover
- B. PreferProvidedEmailInAutoDiscoverAuthPrompts
- C. ExcludeExplicit0365Endpoint
- D. ExcludeHttpAutoDiscoverDomain
Answer : A
Outlook -
It is recommended that users force Outlook to use Modern Authentication by setting the DWORD value of the following registry key to 1:
HKEY_CURRENT_USER\Software\Microsoft\Exchange\AlwaysUseMSOAuthForAutoDiscover
Reference: https://docs.microsoft.com/en-us/exchange/troubleshoot/administration/modern-authentication-configuration
Question 4
A company uses Exchange Online.
Users report issues synchronizing their mobile devices with Exchange.
You need to troubleshoot the issue.
Which cmdlet should you run?
- A. Get-ActiveSyncDevice
- B. Get-MobileDeviceMailboxPolicy
- C. Get-ActiveSyncDeviceClass
- D. Get-MobileDeviceStatistics
Answer : D
How to collect ActiveSync device logs to troubleshoot sync issues between mobile devices and Exchange Online
Reproduce the behavior that you want to capture.
Run the Get-MobileDeviceStatistics cmdlet to retrieve the log:
Get-MobileDeviceStatistics -Mailbox TonySmith -GetMailboxLog ..
Reference: https://docs.microsoft.com/en-us/exchange/troubleshoot/mobile-devices/issues-for-mobile-devices
Question 5
HOTSPOT -
A company uses Exchange Online.
A user named User1 reports that they are unable to add new delegates to and remove them from their calendar.
You need to resolve the issue.
How should you complete the command? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer : 
Box 1: Set-MailboxFolderPermission
How to Rebuild Delegate Access for a Calendar with PowerShell
To complete the fix, we need to add delegate permissions again. You could ask the user to do this by updating the permissions assigned to their calendar, but it’s easier and more polite for the administrator who’s just reset the delegate information to do the job for the user by running the Set-MailboxFolderPermission cmdlet. If you don’t do reset permissions, delegates will have editor permission for the calendar folder, but they won’t be able to process calendar invitations on behalf of the mailbox owner. Here’s how to reset the permissions for Ken Bowers:
Set-MailboxFolderPermission -Identity [email protected]:\Calendar -User [email protected] -SharingPermissionFlags Delegate, CanViewPrivateItems -AccessRights Editor
Box 2: SharingPermissionFlags -
Reference: https://office365itpros.com/2021/01/20/rebuild-delegate-access-calendar-powershell/
Question 6
HOTSPOT -
A company creates a resource mailbox named Conference Room.
Recipients outside the company do not receive confirmations after they schedule meetings with the conference room.
You need to ensure that the recipients receive meeting confirmations.
How should you configure the command? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer : 
Box 1: Set-CalendarProcessing -
Use the Set-CalendarProcessing cmdlet to modify calendar processing options for resource mailboxes, which include the Calendar Attendant, resource booking assistant, and calendar configuration.
Incorrect:
* Set-MailboxAutoReplyConfiguration
Use the Set-MailboxAutoReplyConfiguration cmdlet to configure Automatic Replies settings for a specific mailbox.
This command does not have the relevant parameters.
* The Set-CalendarNotification cmdlet allows users to set text message notification options for calendar events in their own calendar.
This command does not have the relevant parameters.
Box 2: -ProcessExternalMeetingMessages
The ProcessExternalMeetingMessages parameter specifies whether to process meeting requests that originate outside the Exchange organization.
Reference: https://docs.microsoft.com/en-us/powershell/module/exchange/set-calendarprocessing
Question 7
A company uses a Microsoft Exchange Server 2019 hybrid environment.
You migrate an Exchange Server mailbox to Exchange Online.
You observe that the data consistency score (DCS) indicates the investigate status.
You need to troubleshoot the reason for the DCS status.
Which cmdlet should you use?
- A. Get-MailboxRestoreRequestStatistics
- B. Get-MailboxImportRequestStatistics
- C. Get-MoveRequestStatistics
- D. Get-SyncRequestStatistics
Answer : C
Use the Get-MoveRequestStatistics cmdlet to view detailed information about move requests.
PowerShell log collection and analysis
First, generate XML reports for the move request / sync request / mailbox import request / public folder mailbox move request or migration user statistics or a restore request to analyze.
For Hybrid moves use:
Get-MoveRequestStatistics [email protected] -IncludeReport -DiagnosticInfo verbose | Export-Clixml C:\Temp\EXO_MoveRequestStatistics_User1.xml
Reference: https://docs.microsoft.com/en-us/powershell/module/exchange/get-moverequeststatistics https://techcommunity.microsoft.com/t5/exchange-team-blog/migrations-with-data-consistency-score-dcs-more-than-you-ever/ba-p/2393406
Question 8
A company uses a Microsoft Exchange Server 2019 hybrid environment. The company is migrating mailboxes to Exchange Online.
You notice that the migration activity for larger mailboxes is slow. You review the migration logs and observe multiple instances of the following message:
You need to troubleshoot the issue.
What is the reason for the slow migrations?
- A. There is a temporary interruption in the content indexing operations.
- B. The disk latency on the Exchange Server is too high.
- C. The replay queue of the transactions logs is too large.
- D. The CPU utilization on the Exchange Server is too high.
Answer : C
StalledDueToTarget_MdbAvailability: the move monitors replay queue of transactions logs into remote copies of databases. Migration stalls when the queue gets too big and will last until it drains.
Reference: https://techcommunity.microsoft.com/t5/exchange-team-blog/troubleshooting-slow-migrations/ba-p/1795706
Question 9
A company uses a Microsoft Exchange Server 2019 hybrid environment.
Users hosted on Exchange Online report that they cannot view Exchange Server users’ free/busy information. Exchange Online users can view free/busy information for other Exchange Online users. Exchange Server users can view free/busy information for other Exchange Server users.
You need to troubleshoot why Exchange Online users cannot view free/busy information for Exchange Server users.
What are two possible ways to achieve this goal? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.
- A. Run the Get-ExchangeServer | f1 InternetWebProxy cmdlet on the Exchange Server.
- B. Run the Install-FreeBusyFolder cmdlet on the Exchange Server.
- C. Run a connectivity test from the Microsoft Remote Connectivity Analyzer.
- D. Run the Get-OrganizationRelationship cmdlet in Exchange Online.
Answer : CD
C: Cloud user can't see On-premises user's Free/Busy
Use the following methods to verify that Autodiscover can be resolved from an external source and that the Firewall is open.
Method 2: Verify that you can send an Autodiscover POST request to potential Autodiscover URLs
Go to Microsoft Remote Connectivity Analyzer.
On Microsoft Office Outlook Connectivity Tests select Outlook Autodiscover, and then select Next.
Complete the Outlook Autodiscover form (Email address, User Name and password), then select Perform Test.
If the Exchange connectivity tests fail for autodiscover, check the on-premises Autodiscover Internet Access configuration.
D: Cloud user cannot see On-premises user's Free/Busy (if issue not resolved)
Is the domain name present in the org relationship?
To verify the domain name value in the Organization Relationship, follow these steps:
Connect to Exchange Online by using Windows PowerShell. For more information about how to do this, see Connect to Exchange Online using remote PowerShell.
In Windows PowerShell, run the following command:Get-OrganizationRelationship -Identity "Exchange Online to On Premises Organization Relationship" | FL
Check DomainName value. The vanity domain (yourdomain.com) should be present.
If the DomainName value is missing your vanity domain, run the following command:Set-OrganizationRelationship -Identity "Exchange Online to On Premises Organization Relatio..
Reference: https://docs.microsoft.com/en-us/exchange/troubleshoot/calendars/troubleshoot-freebusy-issues-in-exchange-hybrid#cloud-user-cant-see-on-premises-users-freebusy
Question 10
A company uses Exchange Online in a multi-geo environment. A user named User1 has delegate permission to the mailbox of a user named User2. Auditing is enabled for the organization. All users are assigned Microsoft 365 E5 licenses.
You discover that all mailbox access to User2 is being logged. However, security policies mandate that only mailbox access from administrators should be audited.
You need to ensure that mailbox audit logs conform to the security requirements.
Solution: Run the following command: Set-MailboxAuditBypassAssociation –Identity User2 –AuditByPassEnabled $true
Does the solution meet the goal?
- A. Yes
- B. No
Answer : B
Instead: Run the following command: Set-Mailbox –Identity User2 –DefaultAuditSet AuditAdmin
Note: Use the Set-MailboxAuditBypassAssociation cmdlet to configure mailbox audit logging bypass for user or computer accounts such as service accounts for applications that access mailboxes frequently.
When you configure a user or computer account to bypass mailbox audit logging, access or actions taken by the user or computer account to any mailbox isn't logged. By bypassing trusted user or computer accounts that need to access mailboxes frequently, you can reduce the noise in mailbox audit logs.
Note: -AuditBypassEnabled -
The AuditBypassEnabled parameter specifies whether audit bypass is enabled for the user or computer. Valid values include the following:
$true: Enables mailbox audit logging bypass
$false: Disables mailbox audit logging bypass
Reference: https://docs.microsoft.com/en-us/powershell/module/exchange/set-mailboxauditbypassassociation
Question 11
A company uses Exchange Online. External sharing is disabled.
A user reports that they are unable to share their calendar with an external recipient.
You need to resolve the issue.
Solution: Grant anonymous permission to the user’s calendar.
Does the solution meet the goal?
- A. Yes
- B. No
Answer : B
Solution: Instruct the user to add the external recipient as a delegate.
Note: Delegate access to a mailbox is a popular feature supported by Outlook desktop, OWA, and Outlook Mobile. In some cases, you only want to allow access to a specific folder rather than the complete mailbox. Calendar access is often granted to delegates to allow other people to deal with someone’s schedule. It’s easy for users to assign delegate access to their calendar. For instance, in OWA, go to the calendar, click the […] beside the calendar you want to share, select Sharing and permissions, and then add the new delegate.
Reference: https://office365itpros.com/2021/01/20/rebuild-delegate-access-calendar-powershell/
Question 12
A company uses Exchange Online. The company configures a transport rule that appends to emails from external senders.
Users report that they are unable to accept calendar invitations from external senders.
You need to ensure that users can accept calendar invitations.
What are two possible ways to achieve this goal? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.
- A. Change the fallback action on the transport rule to reject.
- B. Configure an exception on the transport rule to skip calendar invites.
- C. Change the fallback action on the transport rule to ignore.
- D. Select the Stop processing more rules option on the transport rule.
Answer : BD
B: Exceptions: Optionally identify the messages that the actions shouldn't apply to. The same message identifiers that are available in conditions are also available in exceptions. Exceptions override conditions and prevent the rule actions from being applied to a message, even if the message matches all of the configured conditions.
D: Stop processing more rules: You can choose to stop applying additional rules to a message after a rule processes a message.
How mail flow rules are applied to messages
All messages (except NDRs) that flow through your organization are evaluated against the enabled mail flow rules in your organization. Rules are processed in the order listed on the Mail flow > Rules page in EAC, or based on the corresponding Priority parameter value in the PowerShell.
Each rule also offers the option of stopping processing more rules when the rule is matched. This setting is important for messages that match the conditions in multiple mail flow rules.
Reference: https://docs.microsoft.com/en-us/exchange/security-and-compliance/mail-flow-rules/mail-flow-rules
Question 13
HOTSPOT -
A company uses Exchange Online. The company configures a room mailbox named Room1 to use resource delegates.
Resource delegates report that they are not able to approve meeting requests for Room1.
You need to ensure that resource delegates receive meeting request emails.
How should you complete the command? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer : 
Box 1: Set-CalendarProcessing -
Use the Set-CalendarProcessing cmdlet to modify calendar processing options for resource mailboxes, which include the Calendar Attendant, resource booking assistant, and calendar configuration.
Box 2: AutoAccept -
This example allows the Calendar Attendant to approve in-policy requests from all users.
Set-CalendarProcessing -Identity "5th Floor Conference Room" -AutomateProcessing AutoAccept -AllBookInPolicy $true
Reference: https://docs.microsoft.com/en-us/powershell/module/exchange/set-calendarprocessing?view=exchange-ps
Question 14
HOTSPOT -
A company uses Exchange Online. The Exchange ActiveSync access setting is configured to quarantine.
A user named User1 removes a mobile device from Exchange.
When User1 tries to connect the same device to Exchange, the device is not quarantined.
You need to ensure that the device is quarantined.
How should you complete the command? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer : 
Box 1: Set-CASMailbox -
Workaround -
To prevent the device from connecting, set the ActiveSyncAllowedDeviceIDs and ActiveSyncBlockedDeviceIDs parameters to $null after you remove the device. For example, run the following cmdlet:
Set-CASMailbox [email protected] -ActiveSyncAllowedDeviceIDs $null
When these parameters are set to $null, the device is quarantined when it tries to connect.
Box 2: ActiveSyncAllowedDeviceIDs
Reference: https://docs.microsoft.com/en-us/exchange/troubleshoot/mobile-devices/mobile-devices-not-quarantined-as-expected
Question 15
A company uses Exchange Online.
A user named User1 schedules a meeting with a conference room mailbox named Conf1. Conf1 is already reserved for another meeting but does not automatically decline the conflicting meeting request.
You need to ensure that conflicting meeting requests sent to Conf1 are declined.
What should you do?
- A. Set the value of the AllBlockInPolicy property for the room mailbox to False.
- B. Remove User1 from the BookInPolicy property list.
- C. Remove User1 from the ResourceDelegated property list.
- D. Set the value of the AllRequestOutOfPolicy property for the room mailbox to False.
Answer : A
-AllBookInPolicy
The AllBookInPolicy parameter specifies whether to automatically approve in-policy requests from all users to the resource mailbox. Valid values are:
$true: In-policy requests from all users are automatically approved. This is the default value.
$false: In-policy requests from all users aren't automatically approved (approval by a delegate is required).
Incorrect:
-AllRequestOutOfPolicy
The AllRequestOutOfPolicy parameter specifies whether to allow all users to submit out-of-policy requests to the resource mailbox. Valid values are:
$true: All users are allowed to submit out-of-policy requests to the resource mailbox. Out-of-policy requests require approval by a resource mailbox delegate.
$false: All users can't submit out-of-policy requests to the resource mailbox. This is the default value.
-BookInPolicy
The BookInPolicy parameter specifies users or groups who are allowed to submit in-policy meeting requests to the resource mailbox that are automatically approved. You can use any value that uniquely identifies the user or group.
Resource delegates are responsible for accepting or declining meeting requests that are sent to the room mailbox.
Reference: https://docs.microsoft.com/en-us/powershell/module/exchange/set-calendarprocessing