Exam 70-663 - Designing and Deploying Messaging Solutions with Microsoft Exchange Server 2010
Skills measured
This exam measures your ability to accomplish the technical tasks listed below. The percentages indicate the relative weight of each major topic area on the exam. The higher the percentage, the more questions you are likely to see on that content area on the exam.
Please note that the questions may test on, but will not be limited to, the topics described in the bulleted text.
Planning the Exchange Server 2010 infrastructure (20%)
- Design the Exchange Server 2010 installation
- Define Exchange Server locations, Exchange Domain Name Server (DNS) requirements, plan for common and/or shared namespaces, Service Level Agreement (SLA) requirements, Active Directory (AD) site topologies, network topology, Exchange federation, directory synchronization with the cloud, multi-domain, multi-forest, resource forest, Exchange Deployment Assistant
- Design message routing
- Inter- and intra-site hub routing; connectors; plan connectivity between Exchange and other messaging applications; design and deploy hub mail flow (on-premises and/or cloud-based services); design and deploy Edge connectors/scoping; design message transport; reverse zone (PTR records); scale hub transport server performance; transport storage requirements, including transport dumpster, message queues, and shadow redundancy; multi-domain; multi-forest; resource forest; accepted domains; remote domains; send connector configuration
- Design the mailbox server role
- Plan database sizing; storage performance requirements such as I/O and disk latency requirements; multi-domain; multi-forest; resource forest; public folders; design recipient, distribution group, and mailbox provisioning and deprovisioning policies (on-premises and/or cloud-based services)
- Design client access
- Local versus remote access; mobile access policies; identify and plan for supported messaging clients or protocols, such as IMAP, POP, and Exchange ActiveSync; Outlook Anywhere; Web services; OWA; MAPI (RPC Client Access); RPC CAS Kerberos Authentication; scale CAS server performance; storage requirements; multi-domain; multi-forest; resource forest; plan the location and configuration of Client Access Servers (CASs); plan the AutoDiscover implementation; plan for Federated Delegation; CAS proxy and redirection
- Plan for transition and coexistence
- This objective applies to on-premises and/or cloud-based services: plan and investigate consolidation of Exchange servers, plan intra- and inter-org migration, decommission legacy environment, free/busy, inter-org message routing, how to preserve the ability to reply to a message (x500, SMTP, and legacyExchangeDN), public folders (free/busy lookup, replication), identify when to use a transition rather than a migration, coexistence with third-party messaging systems
Preparation resources
- Exchange 2010 system requirements
- Overview of the mailbox server role
- Services used by a Client Access Server
Deploy the Exchange Server 2010 infrastructure (20%)
- Prepare the infrastructure for Exchange Server 2010 deployment
- Requirements to prepare schema, prepare domain, and prepare Active Directory; legacy permissions; prepare forest; forest functional level; domain controller versions, roles (excluding RODC/ROGC), and placement; prepare network services, including directory synchronization, SMTP, federation, and DNS for on-premises and/or cloud-based services
- Deploy Edge transport server role
- This objective applies to on-premises and/or cloud-based services: validate Exchange deployment, EdgeSync, configure transport agents, replace perimeter email gateway, configure address rewriting
- Deploy Client Access Server role
- This objective applies to on-premises and/or cloud-based services: deploy CAS hardware and protocols, deploy mobile messaging services and connectivity, validate client connectivity, validate client functionality, autodiscover, multi-site/domain/forest
- Deploy hub transport server role
- This objective applies to on-premises and/or cloud-based services: validate Exchange deployment, multi-site/domain/forest, configure transport rules, accepted domains, remote domains, send and receive connectors, message and recipient limits, deploy email relay, validate message transport
- Deploy mailbox server role
- Database configuration and placement quota enforcement policies, deploy the Mailbox server and storage, deploy the mailbox database, deploy address lists and offline address books, validate Mailbox server performance, validate Mailbox server access, deploy public folders, configure public folder replication, configure client access to public folders, configure public folder permissions
- Deploy server roles for coexistence and migration
- Coexistence with and/or migration from Exchange 2003, 2007, 2010, cloud-based services, and third-party messaging systems; coexistence with namespaces; validate Exchange deployment; server transition process; transport rule coexistence; conversion from LDAP to OPATH filtering; routing group connector (RGC) configuration
Preparation resources
- Planning roadmap for new deployments
- Managing transport servers
- Managing Mailbox servers
Design and deploy security for the Exchange organization (20%)
- Design and deploy messaging security
- This objective applies to on-premises and/or cloud-based services: secure relaying, signing and/or encrypting with S/MIME, certificates, MTLS, Information Rights Management (IRM), ActiveSync with IRM, Federation with IRM, define message security requirements, plan SMTP connector security, plan secure routing between organizations, plan client-based message security, plan Outlook Protection Rules
- Design and deploy Exchange permissions model
- This objective applies to on-premises and/or cloud-based services: role-based access control (RBAC) assignments, scopes, and roles; Exchange Control Panel (ECP); modification of default RBAC roles; creation of custom RBAC roles; plan administrative permissions using the built-in management roles; plan administrative permissions using custom management roles; plan remote administration of Exchange servers; database scope split; split permission model
- Design and deploy message hygiene
- This objective applies to on-premises and/or cloud-based services: design and deploy Edge security; identify, plan, and design anti-spam and antivirus solutions for the messaging deployment; SPA/sender ID; define connection, attachment, recipient, sender, and content filtering rules; safe list aggregation; block lists; phishing confidence level (PCL); spam confidence level (SCL); sender reputation level (SRL)
- Design and deploy client access security
- Design and deploy ActiveSync policies; plan certificates for Exchange CAS; alternate authentication (smart cards, client certificates, and time-based two-factor authentication tokens); authentication protocols (plain text, NTLM, forms based, Kerberos); OWA segmentation
- Design and deploy Exchange object permissions
- This objective applies to on-premises and/or cloud-based services: design and deploy public folder security; mailbox (send as, full access, delegation, mail flow); resource security; distribution groups; design and deploy client access for POP, IMAP, ActiveSync, OWA, and MAPI per mailbox
Preparation resources
- Create a New Exchange certificate
- Understanding permissions
- Securing Client Access Servers
Design and deploy Exchange Server 2010 availability and recovery (21%)
- Design and deploy high availability and disaster recovery for Exchange dependencies
- Directory, network, DNS, storage, site, and data center resiliency; plan for updates and change management
- Design and deploy high availability and disaster recovery for CAS role
- Backup and recovery, design and deploy CAS array, multi-site CAS deployment, DNS updates for client access during site failover, network load balancing
- Design and deploy high availability and disaster recovery for mailbox server role
- Design and deploy database scoping, design DAG, design and deploy public folder replication, backup and recovery, DNS record TTL, file share witness resiliency, activation preference and auto-activation, lag copies, design and deploy continuous replication, design and deploy DAGs distributed across multiple locations, Datacenter Activation Coordination (DAC), database repair
- Design and deploy high availability and disaster recovery for hub transport role
- Backup and recovery, receive connector resiliency, send connector scoping, design and deploy single and multi-site redundant Hub Transport services, network load balancing
- Design and deploy high availability and disaster recovery for Edge transport server role
- Backup and recovery, server placement, DNS load balancing, MX records, namespace changes, design and deploy single and multi-site redundant Edge transport services
Preparation resources
- Deploying high availability and site resilience
- Managing high availability and site resilience
- Understanding backup, restore and disaster recovery
Design and deploy messaging compliance, system monitoring, and reporting (19%)
- Design and deploy auditing and discovery
- This objective applies to on-premises and/or cloud-based services: mailbox and admin audit logging, permissions auditing, message tracking, protocol logging, IRM logging, RBAC (compliance role and scope), identify requirements for discovery or auditing, plan journaling or message record management (MRM) for discovery, plan access permissions for discovery searches
- Design and deploy message archival
- This objective applies to on-premises and/or cloud-based services: dumpster 2.0, legal hold, retention policies (MRM), retention tags, convert managed folders to retention policies, design and deploy alternate mailboxes, plan for managing messages in default Outlook folders, plan a retention policy implementation, plan an AutoTagging implementation, personal archives and the impact on database design
- Design and deploy transport rules for message compliance
- Ethical firewall; message journaling; disclaimers; MailTips, such as notification for external recipients and recipient limits; transport-based signing and/or encryption (S/MIME, MTLS, IRM)
- Design and deploy for monitoring and reporting
- Design and deploy message flow monitoring; client accessibility; SLA requirements; analyze client usage, number of messages, and message size; monitor client access services; troubleshoot client access services; mailbox access reporting