Defining policies and security procedures

  By —

Questions derived from the 70-237 - Pro: Designing Messaging Solutions with Microsoft Exchange Server 2007 Microsoft Self-Test Software Practice Test.

Objective: Defining policies and security procedures
SubObjective: Design secure messaging

Item Number: 70-237.4.3.2
Multiple Answer, Multiple Choice

You are the messaging engineer for the AccuTech Corp. You have installed Exchange Server 2007 messaging system in your organization. Your Exchange Server 2007 messaging system hosts an Edge Transport Server, a Hub Transport Server, a Mailbox Server and a Client Access Server. There are various departments in your organization, namely sales, marketing, research, vendor and finance. You have created separate storage groups for each department in the organization. You want to prevent transmission of messages between the marketing and vendor groups.

Which actions should you perform to achieve the objective? (Each correct answer presents part of the solution. Choose two.)

1. Run the Enable-JournalRule cmdlet in the Exchange Management Shell
2. Run the Set-JournalRule cmdlet in the Exchange Management Shell
3. Run the New-JournalRule cmdlet in the Exchange Management Shell
4. Type the $Condition = Get-TransportRulePredicate BetweenMemberOfcommand in the Exchange Management Shell
5. Run the New-TransportRule cmdlet in the Exchange Management Shell

Answer:
D. Type the $Condition = Get-TransportRulePredicate BetweenMemberOfcommand in the Exchange Management Shell
E. Run the New-TransportRule cmdlet in the Exchange Management Shell

Tutorial:
The options stating that you should type the $Condition = Get-TransportRulePredicate BetweenMemberOfcommand in the Exchange Management Shell and run the New-TransportRule cmdlet in the Exchange Management Shell are correct. To achieve the objective, you should first configure the BetweenMemberOf transport rule predicate by using the $Condition = Get-TransportRulePredicate BetweenMemberOfcommand. This command assigns a condition to the transport rule agent. The first predicate property value for this condition should be the distribution group object for the marketing group and the second predicate property value for this condition should be the distribution group object for the vendors group. Then you should run the New-TransportRule cmdlet in the Exchange Management Shell to prevent transmission of messages between the marketing and vendor groups. To block the flow of e-mail messages between two individual users or groups, you should create an ethical wall between them. To create an ethical wall, you should create transport rules on a Hub Transport Server. After you have created a condition using $Condition = Get-TransportRulePredicate BetweenMemberOf command, you should run the New-TransportRule cmdlet to apply that condition. You should run the New-TransportRule cmdlet on the Hub Transport Server because all messages entering or leaving your Exchange organization are routed through the Hub Transport Server. The Hub Transport server will apply transport rules on all messages. You can also use transport rules to prevent communication between two groups located in different sites.

You should not run the Enable-JournalRule cmdlet in the Exchange Management Shell to achieve the objective in this scenario. A journal rule allows you to save a copy of e-mail messages sent and received from a user, a group or an entire organization in a secured compliance folder. The Enable-JournalRule cmdlet allows you to enable a journal rule disabled earlier. The Enable-JournalRule cmdlet requires you to specify the Identity parameter to identify the journal rule that needs to be enabled. To disable a journal rule, you can use the Disable-JournalRule cmdlets.

You should not run the Set-JournalRule cmdlet in the Exchange Management Shell to achieve the objective in this scenario. A journal rule allows you to save a copy of e-mail messages sent and received from a user, a group or entire organization in a secured compliance folder. The Set-JournalRule cmdlet allows you to modify an existing journal rule. The Set-JournalRule cmdlet requires the Identity parameter to identify the journaling agent that needs to be modified. You can also specify other parameters such as Recipient, JournalEmailAddress or Scope in any combination, to provide the new values.

You should not run the New-JournalRule cmdlet in the Exchange Management Shell to achieve the objective in this scenario. A journal rule allows you to save a copy of e-mail messages sent and received from a user, a group, or an entire organization in a secured compliance folder. The New-JournalRule cmdlet is used to create a journal rule. This will require you to specify values for the Name, Scope, Recipient and JournalEmailAddress parameters while creating a journal rule. The Name parameter assigns a name to the new journal rule, and the Recipient parameter defines the source whose messages will be copied to the mailbox compliance folder.

Reference:
Microsoft TechNet > How to Configure an Ethical Wall

Microsoft TechNet > How to Create a New Transport Rule

Microsoft TechNet > Understanding Ethical Walls