nerdexam
Microsoft

70-663 · Question #126

A corporate environment includes Exchange Server 2010. Two teams of support technicians manage mailboxes for the organization. You have the following requirements: - The Tier 1 support team must…

The correct answer is A. Create an exclusive scope for the Tier 2 support team. When you create an exclusive scope, only those who are assigned that exclusive scope can modify the objects that match the scope. Role assignees who aren't assigned that exclusive scope, or an equivalent, can't modify the objects that match the scope, even if their own roles…

Advanced Mailbox Management and Client Access Services

Question

A corporate environment includes Exchange Server 2010. Two teams of support technicians manage mailboxes for the organization. You have the following requirements:

  • The Tier 1 support team must manage mailboxes for all users other

than those in the Executive Organizational Unit (OU).

  • The Tier 2 support team must manage mailboxes for all users in the

Executive OU. You need to recommend a solution that meets the requirements. What should you recommend?

Exhibit

70-663 question #126 exhibit

Options

  • ACreate an exclusive scope for the Tier 2 support team.
  • BCreate an explicit scope for the Tier 1 support team.
  • CCreate an exclusive scope for the Tier 1 support team.
  • DCreate a configuration scope for the Tier 2 support team.

How the community answered

(17 responses)
  • A
    76% (13)
  • B
    12% (2)
  • C
    6% (1)
  • D
    6% (1)

Explanation

When you create an exclusive scope, only those who are assigned that exclusive scope can modify the objects that match the scope. Role assignees who aren't assigned that exclusive scope, or an equivalent, can't modify the objects that match the scope, even if their own roles have scopes that would otherwise include Using scope filters, you can create a scope that matches how you segment your recipients, databases, and servers so that administrators can manage only those objects they should have access to. Scope filters can use nearly any recipient, database, or server object property.

Topics

#RBAC#exclusive scope#management scope#OU delegation

Community Discussion

No community discussion yet for this question.

Full 70-663 Practice