70-341 Sample Questions & Answers
Four areas split the exam evenly: the mailbox role and its high-availability setup, client access server deployment and connectivity troubleshooting, transport planning and message hygiene, and designing the infrastructure around Active Directory.
Launch the full 70-341 simulator →Showing 10 of 20 free samples.
- Question 1Intermediate
Plan, Install, Configure, and Manage Client Access · Plan, Deploy, and Manage Client Access Server
True or False: In an Exchange 2013 environment with multiple Active Directory sites, a Client Access server in one site can proxy a user's connection directly to a Mailbox server in a different Active Directory site.
Show answer & explanation
Correct answer: B
This statement is false. In Exchange 2013, a Client Access server will only proxy connections to Mailbox servers within its own Active Directory site. If a user connects to a CAS in a different site from their active mailbox, that CAS will proxy the connection to a CAS in the correct AD site, which will then communicate with the Mailbox server. This behavior is known as a double-hop proxy and maintains site affinity.
- Question 2Intermediate
Plan, Install, Configure, and Manage Transport · Configure and Manage Transport
A hospital's Exchange 2013 organization uses Data Loss Prevention (DLP) policies to prevent the unauthorized transmission of Patient Health Information (PHI). A policy is configured to block any email containing 10 or more instances of PHI data. A doctor needs to send an email with 12 patient records to an external specialist for a consultation. The policy is blocking the email. The hospital's compliance rules allow for such exceptions if a valid business justification is provided. What feature should be configured to allow the doctor to send the message after providing a reason?
Show answer & explanation
Correct answer: B
DLP policies are implemented as transport rules. The action of a transport rule can be configured to allow a user override with a business justification. When this is enabled, the user is presented with a Policy Tip in Outlook explaining the violation. The user can then choose to override the block and provide a reason, which is logged for auditing purposes. This meets the requirement of allowing an exception with justification.
- Question 3Beginner
Design and Manage an Exchange Infrastructure · Deploy and Manage Site Resilience
You are recovering a failed Exchange 2013 Mailbox server named MBX-FAIL-01, which was part of a Database Availability Group (DAG). The original server hardware is unrecoverable. You have provisioned a new server with the same name, operating system, and disk layout. What is the PowerShell command switch you must use with
Setup.exeto restore the server's Exchange configuration from Active Directory?Show answer & explanation
Correct answer: A
The
/m:RecoverServerswitch is used withSetup.exeto perform a disaster recovery installation of a failed Exchange server. This process reads the configuration information for the server from Active Directory and applies it to the new hardware, effectively rebuilding the server to its pre-failure state without needing a backup of the server itself. - Question 4Intermediate
Plan, Install, Configure, and Manage Client Access · Troubleshoot Client Connectivity
A user reports that their Outlook 2013 client, configured with an Exchange account, is frequently disconnecting and reconnecting. You use the
Test-OutlookConnectivitycmdlet to investigate. The test fails with an error related to certificate validation. The user is internal to the corporate network. You examine the certificate bound to IIS on the Client Access server and notice the Subject Name ismail.contoso.com, while the internal autodiscover URI is set tohttps://autod.corp.contoso.com/autodiscover/autodiscover.xml. What is the most effective solution to resolve this issue for all internal clients?Show answer & explanation
Correct answer: B
The root cause of the problem is a certificate name mismatch. The client is trying to connect to
autod.corp.contoso.com, but the certificate presented by the server is only valid formail.contoso.com. The best practice and most effective solution is to reissue the SSL certificate to include all necessary hostnames (like autodiscover, OWA, etc.) as Subject Alternative Names (SANs). This ensures that clients can validate the certificate for all services they connect to. Changing internal URIs to match the external name is another valid approach (split-brain DNS), but reissuing the certificate is often the more direct solution if other internal services rely on thecorpnamespace. - Question 5IntermediateSelect 2
Install, Configure, and Manage the Mailbox Role · Plan the Mailbox Role
A company is migrating from a legacy third-party archiving solution to Exchange 2013 In-Place Archiving. The compliance department requires that all items older than two years be moved to the archive mailbox automatically, and any item in the archive older than seven years be permanently deleted. Which two objects must you create and configure to meet these requirements? (Select TWO).
Show answer & explanation
Correct answers: B, D
A retention policy is the container object that is applied to mailboxes. It links together one or more retention tags to enforce the desired messaging records management (MRM) settings.
Retention tags define the specific actions and timeframes. You would need at least two: a Default Policy Tag (DPT) with a 'Move to Archive' action after 730 days (2 years), and another DPT with a 'Permanently Delete' action after 2555 days (7 years) that applies to the archive.
- Question 6Advanced
Design and Manage an Exchange Infrastructure · Deploy and Manage Site Resilience
Case Study: Northwind Traders
Company Background:
Northwind Traders is an international import/export company with its headquarters in New York and a branch office in London. The company currently has an Exchange Server 2013 organization. There are two Active Directory sites, one for each office, connected by a reliable, high-speed WAN link. The organization has 2,000 mailboxes in New York and 500 in London.Existing Environment:
The Exchange environment consists of four multi-role servers (Mailbox and Client Access). Two servers are located in the New York datacenter (NYC-EX1, NYC-EX2) and two are in the London datacenter (LON-EX1, LON-EX2). All four servers are members of a single Database Availability Group (DAG) named DAG-GLOBAL. The file share witness for the DAG is located on a file server in the New York datacenter. All users connect to a unified namespace,mail.northwindtraders.com, which resolves to a load balancer in each site.Problem Statement:
During a recent WAN outage, users in the London office were unable to access their mailboxes, even though their mailboxes were active on the London servers. An investigation revealed that the London servers lost quorum because they could not contact the file share witness in New York. The business cannot tolerate this downtime and requires automatic mailbox accessibility for users within a site, regardless of the WAN link status.Requirement:
You must reconfigure the DAG to ensure that a WAN failure does not cause a loss of quorum and service outage in either datacenter. The solution must maintain the ability for automatic database failover within each site. What is the most appropriate action to take?Show answer & explanation
Correct answer: B
The core issue is the single point of failure for the quorum witness. Exchange Server 2013 supports an Alternate File Share Witness. By configuring an FSW in New York and an alternate FSW in London, the DAG can maintain quorum in either site if the WAN link fails. This allows each site to function independently from a quorum perspective, preventing the described outage scenario while still using a single DAG. This is the Microsoft-recommended best practice for a two-datacenter DAG configuration. DAC mode is also required for site resilience, but it does not solve the witness problem.
- Question 7Intermediate
Plan, Install, Configure, and Manage Transport · Troubleshoot Mail Flow
You are troubleshooting mail flow in an Exchange 2013 organization. An inbound email from an external partner is being rejected. You need to examine the detailed SMTP conversations that occur on the Front End transport service on your Client Access Server, CAS01. Which PowerShell command should you run to achieve this?
Show answer & explanation
Correct answer: D
Protocol logging captures the SMTP conversations that occur on Send and Receive connectors. To troubleshoot inbound mail on the Front End transport service, you must enable verbose protocol logging on the appropriate Receive connector on the Client Access server. The Message Tracking Log shows message events but not the SMTP conversation. Pipeline tracing and connectivity logging serve different troubleshooting purposes.
- Question 8Advanced
Install, Configure, and Manage the Mailbox Role · Configure and Manage the Mailbox Role
Your company uses Exchange 2013 public folders extensively for collaboration. The primary hierarchy public folder mailbox becomes corrupted and cannot be repaired. Fortunately, you have a secondary hierarchy public folder mailbox on another server in the DAG that is up-to-date. How do you force all user mailboxes to connect to the secondary public folder mailbox for their hierarchy information?
Show answer & explanation
Correct answer: B
In Exchange 2013, each user mailbox has a
DefaultPublicFolderMailboxproperty that points to the hierarchy public folder mailbox it should use. To redirect all users to a new hierarchy mailbox, you must update this property on their mailboxes. PipingGet-MailboxtoSet-Mailboxwith the-DefaultPublicFolderMailboxparameter is the correct method to perform this in bulk. TheSet-OrganizationConfigcmdlet is used to set the default for newly created mailboxes, not existing ones. - Question 9Intermediate
Design and Manage an Exchange Infrastructure · Plan for Exchange Integration with Active Directory
You are configuring a new Exchange 2013 organization. You need to ensure that any mail-enabled user created in the 'Sales' Organizational Unit (OU) automatically gets an email address in the format
[email protected], while users in other OUs get the default[email protected]format. What is the most efficient way to achieve this?Show answer & explanation
Correct answer: A
Email Address Policies (EAPs) are used to automatically generate email addresses for recipients. To target a specific set of users, like those in the Sales OU, you create a new policy with a higher priority (a lower number, like 1) than the default policy. You then configure the recipient filter for this policy to apply only to users within the specified OU. This ensures the Sales users get their specific format, while all other users fall through to the default policy.
- Question 10IntermediateSelect 3
Plan, Install, Configure, and Manage Client Access · Configure Client Connectivity
A new ActiveSync policy is required for executives at your company. This policy must enforce device encryption and a complex password, but it must not disable the camera on their mobile devices. You have an existing default policy that disables the camera for all users. Which actions must you perform? (Select THREE).
Show answer & explanation
Correct answers: A, B, D
First, a new policy must be created to contain the specific settings for the executive group.
After creating the policy, you must use
Set-ActiveSyncMailboxPolicyto define its attributes, such as enabling the camera (-AllowCamera $true), requiring encryption, and setting password requirements.Finally, the new policy must be explicitly assigned to the target user mailboxes using the
Set-CasMailboxcmdlet with the-ActiveSyncMailboxPolicyparameter.
Ready for the real thing?
The full 70-341 simulator has every exam-style question, timed mode, and instant scoring.