Which permission granted to the service account allows BlackBerry device users to send email messages from the device? (Choose one)

Question

Options

• AMicrosoft Exchange permission Send As (Microsoft Exchange 2003) / Microsoft Exchange
• BMicrosoft Exchange permission Administer Information Store (Microsoft Exchange 2003) / ms-
• CMicrosoft Exchange RoleViewOnlyAdmin
• DMicrosoft Active Directory permission Send As
• EMicrosoft Active Directory permissionBuiltIn/Administrators D - AD right Send As

• A
  14% (9)
• B
  2% (1)
• C
  8% (5)
• D
  73% (46)
• E
  3% (2)

Explanation

Option D is correct because BlackBerry Enterprise Server (BES) uses a service account that requires the Active Directory "Send As" permission to allow device users to send email on behalf of their mailbox - this permission is granted at the AD level and enables the BES service account to authenticate outbound mail flow for all managed users.

Why the distractors are wrong:

• A is wrong because the Exchange "Send As" permission operates at the Exchange application layer, not the directory level where BES authenticates; BES requires the AD-level grant specifically.
• B is wrong because "Administer Information Store" is an administrative permission for managing the Exchange data store itself, not for relaying user email.
• C is wrong because ViewOnlyAdmin is a read-only administrative role in Exchange and grants no ability to send or relay messages.
• E is a trap - while it mentions "Send As," the BuiltIn/Administrators group is overly broad and grants far more than needed; BES requires the targeted AD "Send As" permission, not full admin rights.

Memory tip: Think of it this way - BlackBerry Enterprise Server acts as the user when sending mail, so it needs the Active Directory "Send As" right (literally "send as this user"). The keyword "Send As" in the AD context is your anchor - Exchange-layer permissions handle storage and routing, but identity delegation lives in Active Directory.

No community discussion yet for this question.