You have an Exchange Server 2016 organization. The organization contains an Edge Transport server.
Users report that a message with the following anti-spam headers is delivered to their Inbox folder in
Microsoft Outlook.
X-MS-Exchange-Organization-PCL:7
X-MS-Exchange-Organization-SCL:6
X-MS-Exchange-Organization-Antispam-Report: DV: 3.1.3924.1409; SID: SenderIDStatus Fail; PCL:
PhishingLevel SUSPICIOUS; CW: CustomList; PP: Presolved; TIME: TimeBasedFeatures
You need to prevent similar messages from being delivered. The solution must generate a non-delivery
report (NDR) when the messages are prevented from being delivered to all user mailboxes.
What should you do??
Correct Answer: B
Explanation/Reference:
Explanation:
The SenderIDStatus is 'Fail'. However, the email was still delivered due.
Use the Set-SenderIdConfig cmdlet to modify the configuration of the Sender ID agent. The
SpoofedDomainAction parameter specifies the action that the Sender ID agent takes on the message
when the sender domain shows evidence of being spoofed. The SpoofedDomainAction parameter takes
the following values: StampStatus, Reject or Delete. The default value is StampStatus.
We need to change the value of the SpoofedDomainAction parameter to Delete.
References:
https://docs.microsoft.com/en-us/powershell/module/exchange/antispam-antimalware/set-senderidconfig?
view=exchange-ps