nerdexam
BlackBerry

BCP-620 · Question #60

When will BlackBerry device users be unable to send email messages from the BlackBerry device? (Choose one)

The correct answer is C. When the Send As permission is denied at the user level in Active Directory for the BlackBerry. Option C is correct because the BlackBerry Enterprise Server (BES) uses a BlackBerry Service Account to send emails on behalf of device users - a process that requires the "Send As" permission granted at the individual user level in Active Directory. If that permission is…

Authentication and Authorization

Question

When will BlackBerry device users be unable to send email messages from the BlackBerry device? (Choose one)

Options

  • AWhen the BlackBerry Service Account is part of the Domain Administrators group in Active Directory
  • BWhen the Send As permission is denied at the Mailbox Store level in MicrosoftExchange
  • CWhen the Send As permission is denied at the user level in Active Directory for the BlackBerry
  • DWhen the BlackBerry Service Account is part of the Local Administrators group in Active Directory

How the community answered

(24 responses)
  • A
    4% (1)
  • B
    4% (1)
  • C
    83% (20)
  • D
    8% (2)

Explanation

Option C is correct because the BlackBerry Enterprise Server (BES) uses a BlackBerry Service Account to send emails on behalf of device users - a process that requires the "Send As" permission granted at the individual user level in Active Directory. If that permission is explicitly denied on the user's AD object, the BES service account cannot impersonate that user, and email sending fails.

Why the distractors are wrong:

  • A & D are wrong because being a member of Domain Administrators or Local Administrators actually grants elevated privileges - group membership alone doesn't block email sending.
  • B is wrong because BlackBerry's "Send As" delegation is enforced through Active Directory user objects, not the Exchange Mailbox Store level; that's not where BES checks this permission.

Memory tip: Think "Send As = Send as the user in AD." BES needs per-user AD permission to impersonate each mailbox owner - if it's denied on that AD user object, BES is blocked at the source before Exchange is even involved.

Topics

#BlackBerry#Send As permission#Active Directory#email authorization

Community Discussion

No community discussion yet for this question.

Full BCP-620 Practice