Microsoft Test 70-336

Lync Server 2013

Contoso Ltd Case A (Mike)

Overview

General Overview
Contoso, Ltd. is an electronics parts company located in North American.
The company has 4,400 employees.
Contoso recently bought a company named Litware, Inc. Litware has an office in New York.
Litware has a Lync Server 2010 infrastructure and has Microsoft Lync 2010 clients deployed to
all of its client computers.

Physical Locations
Contoso has a main office and a satellite office. The main office is located in Toronto. The
satellite office is located in Boston. The Toronto office has 4,200 users. The Boston office has
200 users.
All offices connect to each other by using a WAN link.
Only the Toronto office connects directly to the Internet.

Existing Environment

Active Directory Environment

Contoso has an Active Directory forest named contoso.com. The forest contains a single
domain. All domain controllers run Windows Server 2008 R2.

Lync Server Environment

Contoso has a Lync Server 2013 infrastructure and a Microsoft Exchange Server 2013
organization. The Lync Server 2013 infrastructure contains an Enterprise Edition Front End
pool named Pool1.
The network contains five servers. The servers are configured as shown in the following
table.

The Lync Server infrastructure currently uses the names shown in the following table.
All users can remotely access the Lync Server services from a client computer.
The users cannot access the Lync Server services from a mobile device.
Some of the users have Lync 2010 installed. Most of the users run Lync 2013.

Problems Statements
Contoso identifies the following business issues:
Users in the Boston office report that there are delays in the audio stream during
conferences and that the audio frequently drops. Users in the other offices do not report this
issue.
Users cannot share Microsoft PowerPoint presentations during web conferences.
Users can share other documents.
All of the users in the Toronto office report that they receive the following error
message from Lync 2013: "Lync can't connect to Exchange.
You might experience Contact list issues".

Requirements

Planned Changes
Contoso plans to implement the following changes:
Implement the unified contact store.
Deploy the Office Web Apps component.
Add a second Front End Server named Lync2 in the Toronto office.
Access Lync Server services by using mobile devices from the internal network and from the
Internet.
Implement direct federation with Litware and other business partners.
All federated domains will have to be defined explicitly.

Administrative Requirements
A support technician named Techl must be able to perform all of the tasks currently
performed by the members of the CSHelpDesk group.
Additionally, Techl must also be able to edit conferencing policies.

Web Conferencing Requirements

Contoso identifies the following requirements for web conferencing:
Users from Litware must be able to download the content of web conferences.
Users must be able to share PowerPoint presentations during web conferences.
Users from Litware must be able to record web conferences.
A URL that points to a disclaimer must be provided.

Mobility Requirements
Contoso plans to provide all users the ability to connect by using mobile devices. When
users connect from a mobile device, they must download their server settings automatically.
Question 1
Which two tasks should be performed to meet the Administrative Requirements for Tech1?

B - Run the New-CsAdminRole cmdlet.

C - Run the Update-CsAdminRole cmdlet.

D - Create a new Universal Security Group and add Tech1 to the Group. (En lugar de C)

NEW-CSADMINROLE
LYNC SERVER 2013
TOPIC LAST MODIFIED: 2013-02-20

Creates a new role-based access control (RBAC) role. RBAC roles are used to define the
management tasks that users are allowed to carry out, and to determine the scope in which
users will be allowed to perform these tasks. This cmdlet was introduced in Lync Server 2010.
The command in Example 1 duplicates the RBAC role CsVoiceAdministrator. Because no
additional parameters are used, the new role -- RedmondVoiceAdministrators -- will be an exact
duplicate of CsVoiceAdministrator, which includes both the UserScopes and ConfigScopes
properties being set to "global".
New-CsAdminRole -Identity "RedmondVoiceAdministrator" -Template "CsVoiceAdministrator"

DETAILED DESCRIPTION
Role-based access control (RBAC) enables administrators to delegate control of specific
management tasks in Lync Server. For example, instead of granting your organization’s help
desk full administrator privileges you can give these employees very specific rights: the right to
manage only user accounts; the right to manage only Enterprise Voice components; the right to
manage only archiving and Archiving Server. In addition, these rights can be limited in scope:
someone can be given the right to manage Enterprise Voice, but only in the Redmond site;
someone else can be given the right to manage users, but only if those user accounts are in the
Finance organizational unit (OU).
The Lync Server implementation of RBAC is based on two key elements: Active Directory
security groups and Windows PowerShell cmdlets. When you install Lync Server, a number of
universal security groups, such as CsAdministrator, CsArchivingAdministrator, and CsHelpDesk
are created for you. These universal security groups have a one-to-one correspondence with
RBAC roles; that means that any user who is in the CsArchivingAdministrator security group
has all of the rights granted to the CsArchivingAdministrator RBAC role. In turn, the rights
granted to an RBAC role are based on the cmdlets assigned to that role (cmdlets can be
assigned to multiple RBAC roles). For example, suppose a role has been assigned the following
cmdlets:

Get-ArchivingPolicy
Grant-ArchivingPolicy
New-ArchivingPolicy
Remove-ArchivingPolicy
Set-ArchivingPolicy
Get-ArchivingConfiguration
New-ArchivingConfiguration
Remove-ArchivingConfiguration
Set-ArchivingConfiguration
Get-CsUser
Export-CsArchivingData
Get-CsComputer
Get-CsPool
Get-CsService
Get-CsSite
The preceding list represents the only cmdlets that a user assigned a hypothetical RBAC role is
allowed to run during a remote Windows PowerShell command-line interface session. If the
user tries to run the Disable-CsUser cmdlet that command will fail because users assigned
the hypothetical role do not have the right to run the Disable-CsUser cmdlet. This applies to
the Lync Server Control Panel as well. For example, an Archiving administrator cannot disable a
user by using the Lync Server Control Panel; that’s because the Lync Server Control Panel
abides by RBAC roles. Any time you run a command in Lync Server Control Panel you are
actually calling a Windows PowerShell cmdlet. If you are not allowed to run the Disable-
CsUser cmdlet, it won’t matter whether you directly run that cmdlet from Windows PowerShell
or if you indirectly run the cmdlet from within the Lync Server Control Panel: the command will
fail.)
Note that RBAC applies only to remote management. If you are logged on to a computer
running Lync Server and you open Lync Server Management Shell, RBAC roles will not be
enforced. Instead, security is enforced primarily through the security groups
RTCUniversalServerAdmins; RTCUniversalUserAdmins; and RTCUniversalReadOnlyAdmins.
When you install Lync Server, Setup creates several built-in RBAC roles. These roles cover
common administrative areas such as voice administration, user management, and Response
Group administration. The built-in roles cannot be modified in any way: you cannot add or
remove cmdlets to the roles and you cannot delete these roles. (Any attempt to delete a built-in
role will result in an error.) However, you can use the built-in roles to create custom RBAC roles.
These custom roles can then be modified by changing the administrative scopes; for example,
you could limit the role to managing user accounts in a particular Active Directory OU.
To create a new role, you must first create a universal security group in Active Directory Domain
Services that shares a name with the role; for example to create a new role named
DialInConferencingAdministrator, you must create a security group with the SamAccountName
DialInConferencingAdministrator. Note that the New-CsAdminRole cmdlet will not create
this group for you. If the DialInConferencingAdministrator group does not exist when you call the
New-CsAdminRole cmdlet then your command will fail. The Identity you assign to your
new role must be the SamAccountName of the corresponding Active Directory group.
After creating the Active Directory security group, you must then select a built-in RBAC role to
serve as the template for your new custom role. You cannot create a blank RBAC role by using
the New-CsAdminRole cmdlet. Instead, all custom roles must be based on one of the built-
in RBAC roles. This means that a custom role must have the same assigned cmdlets as one of
the built-in roles. However, you can use the Set-CsAdminRole cmdlet to change the
administrative scope of this custom role.
Who can run this cmdlet: By default, members of the following groups are authorized to run the
New-CsAdminRole cmdlet locally: RTCUniversalServerAdmins. To return a list of all the
RBAC roles this cmdlet has been assigned to (including any custom RBAC roles you have
created yourself), run the following command from the Windows PowerShell prompt:
Get-CsAdminRole | Where-Object {$_.Cmdlets –match "New-CsAdminRole"}
javascript:void(0)
Describes what would happen if you executed the command without actually executing the
command.

The New-CsAdminRole cmdlet creates new instances of the

Microsoft.Rtc.Management.WritableConfig.Settings.Roles.Role object.

Question 2
You need to modify the FQDN of the External Web Services.

From which Node should you perform the Modification?

Question 3

You are evaluating the implementation of a Reverse Proxy for Contoso.

You plan to create a Certificate for the Reverse Proxy.
You need to identify which names must be included in the Certificate.

Which three names should you identify?

B - meet.contoso.com
D - lyncdiscover.contoso.com
E - webext.contoso.com

http://technet.microsoft.com/en-us/library/jj205381.aspx
webext is the Subject Name and the Alternative Name with meet and lyncdiscover also listed
as Alternative Names

Question 4

You need to recommend a solution to resolve the Audio issues for the users in the Boston
Office.

Which three possible recommendations should you include in the solution?

B - Call Admission Control (CAC)

C - Quality of Service (QoS)
E - A Location Policy

Call Admission Control (CAC) (The Same)

Quality of Service (QoS) (The Same)
A Location Policy (Different from the AP4S)
Question 5
You are evaluating the implementation the second Front End Server.
You need to recommend which Common Name must be used for the Certificate that will be
installed on Lync2.

D - pool1.contoso.com

http://social.technet.microsoft.com/Forums/en-US/ocscertificates/thread/bc2b0383-17cd-4707-
8c2f-19db8dd340f0/

The common name or SN of any Front End Server Certificate is the Pool Name.

Contoso Ltd. Case B

Overview

General Overview
Contoso, Ltd. is an international manufacturing company that has 30,000 users.
Contoso has the following departments: sales, research, marketing, human resources,
executive, manufacturing, and legal. The sales department has 2,000 users.
All of the users in the sales department are located in the United States.
The research department has 3,000 users.
All of the users in the research department are located in Europe.

Physical Locations
Contoso has two main offices. The offices are located in Houston and Frankfurt.
Each office has 15,000 users.
The offices connect to each other by using an MPLS network. Each office connects directly to
the Internet.

Existing Environment

Lync Server Infrastructure

Contoso has a Lync Server 2010 infrastructure that only uses internal instant messaging (IM)
and presence,
The infrastructure contains a single Enterprise Edition Front End pool that services all of the
users.
Contoso uses a SIP domain of contoso.com for all of the users.
Client computers have either Microsoft Office Communicator 2007 R2 installed or Microsoft
Lync 2010 installed.
Before deploying Lync Server 2013 and migrating the users to Lync Server 2013, you
implement a small pilot project to test the functionality of Lync Server 2013.

Problem Statements
The users in the pilot report that occasionally, they cannot sign in to Lync 2013.

Requirements

Business Goals
Contoso plans to upgrade to Lync Server 2013 during the next six months. Contoso must
deploy all of the Lync Server conferencing and edge services. Contoso must also configure
federation with its parent company, which is named Proseware, Inc. Proseware is located
in Europe and has an Office Communication Server 2007 R2 infrastructure.
Contoso must minimize hardware and software purchasing costs, while guaranteeing
performance levels for all Lync Server 2013 workloads.

Planned Changes
Contoso plans to implement the following workloads in the Lync Server 2013 deployment:

Federation
Dial-in conferencing
External user access
Audio, video, and web conferencing

The ability to host Lync meetings that have external participants

The FQDNs of the edge services will be configured as shown in the following table.

Technical Requirements
Contoso identifies the following technical requirements for the planned deployment:

Only Federation to Proseware must be allowed.

All of the Edge services must use default ports.
WAN traffic and Internet traffic must be minimized.
All of the user contacts stored in Lync Server 2013 must be backed up.
The sales department must have a dedicated dial-in conferencing number.
All other users in both the United States and Europe must use a pool of regional dialin
conferencing numbers.
If a Single Component fails, all Lync Services MUST remain available without the
need for manual intervention. Performance degradation is acceptable during a
component failure state.
The conversations of all the sales department users must be archived for 30 days.
The conversations of all the research department users must be archived for 90
days. No other conversations must be archived.
After the migration to Lync Server 2013, all client computers will have three
months to upgrade to Lync 2013. After three months, legacy clients must be
blocked from accessing the Lync Server 2013 infrastructure.

Security Requirements
Contoso identifies the following security requirements for the planned deployment:
All Lync Server conferences must use a unique URL.
Each Internet-facing service must have one or more dedicated public IP addresses.
Only the users in the human resources department must be prevented from
connecting to Lync Server remotely.
Question 1

You need to identify the case of the Authentication issue for the Pilot Users.

Which actions should you perform in sequence?

Question 2

You need to configure the Lync 2013 Infrastructure to meet

the Security Requirements for the Human Resources Department.

The solution must minimize Administrative effort.

What should you do?

A - Create a new User-Level External Access Policy.

Question 3
You need to configure the required External DNS Record to Support Federation.
The solution MUST meet the Business goals and Technical requirements.

How should you configure the DNS record?

Reference: Configuring DNS Records
http://technet.microsoft.com/en-us/library/bb870389%28v=office.12%29.aspx
http://technet.microsoft.com/en-us/library/bb870389%28v=office.12%29.aspx
Question 4

You need to recommend which task must be performed to meet the Backup Requirements.

Which cmdlet should you recommend using?

D - Export-CsUserData

Reference: Export-CsUserData
http://technet.microsoft.com/en-us/library/jj204897.aspx
http://technet.microsoft.com/en-us/library/jj204897.aspx
Export-CsUserData
Detailed Description

The Export-CsUserData cmdlet provides a way for administrators to Export User Data
and/or Conference Directory for a Lync Server Pool.

That data, which can be saved in the User Data format used by either Lync Server 2013
or Microsoft Lync Server 2010 can then be imported by using the Import-CsUserData cmdlet.

To return a list of all the role-based access control (RBAC) roles this cmdlet has been assigned
to
(including any custom RBAC roles you have created yourself), run the following command from
the
Windows PowerShell command-line interface prompt:

Get-CsAdminRole | Where-Object {$_.Cmdlets –match "Export-CsUserData"}

Lync Server Control Panel: The functions carried out by the Export-CsUserData
cmdlet are not available in the Lync Server Control Panel.
http://technet.microsoft.com/en-us/library/jj204897.aspx

Question 5

You need to recommend a Backup Solution to meet the Technical Requirements.

Which tool should you include in the recommendation?

A - Export-CsUserData

Litware, Inc Case A

Overview

General Overview
Litware, Inc., is an international manufacturing company that has 4,000 employees. The
company has a sales department, a marketing department, a research department, and a
human resources department.
Litware has a partner company named Fabrikam, Inc. Fabrikam has an office in Paris.
Fabrikam uses a XMPP-based instant messaging (IM) solution.
Physical Locations
Litware has seven offices located throughout North America and Europe.
Litware has two data centers. The data centers are located in New York and London. All
communications for the North American offices are routed through the New York data center.
All communications for the European offices are routed through the London data center.
The number of users in each office is shown in the following table.

Existing Environment

Active Directory Environment

Litware has an Active Directory forest named litwareinc.com.
The forest contains a single domain.
All domain controllers run Windows Server 2008 R2.
Each office contains five domain controllers.
Each office is configured as an Active Directory Site.

Lync Server Environment

Litware has a Lync Server 2010 infrastructure that contains two servers in the New York office.
The servers are configured as shown in the following table.

The SIP domain is litwareinc.com.

Litware has a Microsoft Exchange Server 2013 organization.

Problem Statements
Users in the London office report poor video quality during conferences.

Requirements

Business Goals
Litware wants to minimize the costs associated with purchasing hardware and software.

Planned Changes
Litware plans to migrate the Lync Server 2010 infrastructure to Lync Server 2013.
The migration will have a coexistence period of six months.
Litware plans to implement the following components as part of the planned migration:

Persistent Group Chat

 The unified contact store
Enterprise Voice for all users
A central site in each data center
A branch site in each branch office
A Front End pool in each central site
Microsoft Lync Phone Edition devices Pool pairing
Litware plans to create a federation relationship with Fabrikam.

Technical Requirements
Litware identifies the following technical requirements for the planned migration:
Users must be able to use all Lync Server features if a single server fails.
Users must be able to connect to the Lync Server infrastructure if a single central site fails.
Members of a group named Temp_Contractors must be prevented from using
Microsoft Lync 2013 when they connect remotely.
Only users in the human resources department must be able to access and
discover a persistent chat room named HRConfidential.

Security Requirements
Litware plans to deploy remote access.
Some users work remotely from their customers offices, which have firewall restrictions.
All of the remote users must be able to connect to the Lync Server infrastructure by using TCP
port 443.

Question 1
You are planning the Lync Server 2013 Migration.
You need to identify which Management Tools must be used
to achieve the following migration tasks during the coexistence period:

Move users from Lync Server 2010 to Lync Server 2013.

Add a server that has Lync Server 2013 deployed to the topology.
Remove a server that has Lync Server 2010 deployed from the topology.

Which tools should you identify?

Question 2

You are evaluating the deployment of the Persistent Chat feature.

You need to recommend which tasks must be performed to create HR Confidential.

Which three actions should you recommend?

Question 3

You need to recommend which Lync Server 2013 components must be deployed to support the
planned changes.
The solution must meet the Technical Requirements.

Which components should you recommend?

Technical Requirements are:
2 Central Sites
Reduce Licensing Costs
All Branch Offices to use central site
Persistent Chat
All users to use Enterprise Voice
------------------------------------------------------------------------------------------------------------------------------
So in each branch site we put in a SBA,
which will allow the branch site to use the central site until failure, then will use the SBA.
Reduce licensing costs - Standard Edition
Fail over incase one of the central sites go offline - Standard edition pool pairing

Question 4
You need to recommend a Remote Access solution for each Central Site.
The solution MUST meet the Security Requirements and the Technical Requirements.

What are two possible recommendations that achieve the goal?

A - • Deploy two Edge Servers that are Load Balanced by using DNS Load Balancing.
• Deploy a Network Address Translation (NAT) Solution.
• Assign one Public IP address to each Edge Server Service on each Edge Server.

B - • Deploy two Edge Servers that are Load Balanced by using a Hardware Load Balancer.
• Assign one Public IP Address to each Edge Server Service on each Edge Server.
• Assign three Public IP Addresses to the Hardware Load Balancer.

Question 5
You need to plan for the implementation of the DHCP configurations for the Lync Phone Edition
devices.

Which three configurations should be applied to the Lync Phone Edition devices from DHCP?

A - The FQDN of the Lync Server Pool Registrar

B - The IP Address of a Time Server
C - The URL of the Certificate Provisioning Service of the Lync Server Pool

http://technet.microsoft.com/en-us/library/gg425854(OCS.14).aspx

Test 70-336 (NL)

Exam A

Question 1
You are evaluating the implementation of the planned monitoring solution.
You need to recommend which tasks must be performed to meet the monitoring requirements.
Which cmdlet should you include in the recommendation?

C - Set-CsCDRConfiguration

Question 2
You need to recommend which task must be performed to meet the backup requirements.

Which cmdlet should you recommend using?

D - Export-CsUserData

http://technet.microsoft.com/en-us/library/hh202171.aspx

Question 3
You plan to deploy a Lync Server 2013 infrastructure. You plan to use a Microsoft SQL Server
database mirror that has a witness.
A database administrator gives you a list of five servers that you can use for the deployment.
The servers are configured as shown in the following table.

You need to identify which servers you must use for the SQL Server backend.

Which servers should you identify?

A- SQL2 and SQL3 for the mirror

SQL5 for the witness

http://technet.microsoft.com/en-us/library/gg398990.aspx

Question 4
You are planning a Lync Server 2013 deployment. You need to recommend which Lync Server
2013 components are required to meet the following requirements:

Presence, chat, and multiparty video conferencing features must be provided.

Quality of Experience (QoE) data and call detail recording (CDR) must be provided.
Lync Server services must be provided to internal users only.
Licensing costs must be minimized.

Which two components should you recommend? (Each correct answer presents part of the
solution. Choose two.)

B - A Standard Edition server

E - A Microsoft SQL Server database
This question only requires internal features, ans edge is not required for this.

Question 5

You have a Lync Server 2010 infrastructure. You plan to migrate to Lync Server 2013. You
have four client computers. The client computers are configured as shown in the following table.

You need to identify which client computer types can use audio conferencing hosted on Lync
Server 2013 without installing any additional software on the client computers.

Which client computer types should you identify? (Each correct answer presents part of the
solution. Choose all that apply.)

B–B

C–C

D–D
http://technet.microsoft.com/en-us/library/jj204672.aspx

Exam B

Question 1
You have a server that has Lync Server 2013 Standard Edition deployed.

You need to back up the database of the Central Management store.

Question 2

You have a Lync Server 2013 infrastructure that is used for conferencing and Enterprise Voice.
Only users who are enabled for Enterprise Voice can use the callback feature.
Other users report that they cannot use the callback feature. You need to ensure that all of the
users who are NOT enabled for Enterprise Voice can use the callback feature.

What should you use from the Microsoft Lync Server 2013 Control Panel?

Question 3
You have a Lync Server 2013 infrastructure that contains four Front End pools. The pools are
configured as shown in the following table.

You configure three archiving policies as shown in the following table

You need to identify which archiving setting will apply each group of users. Which archiving
settings should you identify?

Question 4

You have a Lync Server 2013 infrastructure that contains two servers. The servers are
configured as shown in the following table.

You deploy a new server named lync3.contoso.com. You plan to install the Edge Server role on
Lync3. You need to identify which tasks must be performed to install the Edge Server role on
Lync3.

Which four actions should you identify?

Question 5

You need to identify which tasks must be performed to move the Central Management store
during the planned migration.

Which three actions should you identify?

Lync1 is a Lync 2010 Server - so we do not run any commands on Lync1 to move the CMS

Run Install-CsDatabase from one of the 2013 Front-Ends

Enable-CsTopology - commonly done on the same Front-End server
Move-CsManagementServer - again, target Front-End Pool, commonly done on the same FE.

Exam C

Question 1
You are troubleshooting the issue reported by the Toronto users. You verify that the logging
level of the centralized logging service is set to AlwaysOn. You need to gather additional
troubleshooting information immediately to resolve the issue. Which five actions should you
perform?
To answer, move the five appropriate actions from the list of actions to the answer area and
arrange them in the correct order.
Question 2
You need to identify which configurations must be used to meet the web conferencing
requirements. Which configuration should you identify for each requirement?
To answer, drag the appropriate configuration to the correct requirement in the answer area.
Each configuration may be used once, more than once, or not at all. Additionally, you may need
to drag the split bar between panes or scroll to view content.

Download the content of web conferences -

Share PowerPoint presentations (Conferencing Policy) -
http://blogs.technet.com/b/csps/archive/2011/08/11/confpoliciesenabledatacollaboration.aspx
Record Web Conferences (Conferencing Policy) -
http://blogs.technet.com/b/csps/archive/2011/08/11/confpoliciesallowconferencerecording.aspx
URL Disclaimer (Meeting Configuration) - http://technet.microsoft.com/en-
us/library/gg398638.aspx
Question 3
You have a Lync Server 2013 infrastructure. You need to recommend which tools must be used
to gather information to troubleshoot issues related to the following:
Routing calls between internal users
Routing outbound calls handled by Lync Server 2013

Which tool should you recommend?

Question 4
You have a Lync Server 2013 infrastructure. The infrastructure has monitoring reports and Call
Admission Control (CAC) deployed.
A user named User1 reports poor audio quality during web conferences. You need to identify
whether User1 uses the Siren codec for audio conferences.

Which monitoring report should you use from the Microsoft Lync Server 2013 Control Panel?
Question 5

Your network contains a Lync Server 2013 infrastructure and a Microsoft Exchange Server
2013 organization.
You have three distribution groups. The groups are configured as shown in the following table.

You need to ensure that all of the users on Team1 and Team2 can answer calls that are in the
same queue.
The users must be able to choose when they want to participate in the queue.

Which three actions should you perform?