Select an appropriate security strategy
-Evaluate RBAC; evaluate BitLocker; evaluate Smart Cards; evaluate IRM; evaluate S/MIME; evaluate Domain Secure/TLS; evaluate ADFS Claimed based authentication

Deploy and manage Information Rights Management (IRM) with Active Directory Rights Management Services (AD RMS)
-Create an AD RMS template; create transport protection rules; create Microsoft Outlook protection rules; configure transport decryption; configure IRM for discovery; configure prelicensing for client access

Configure and interpret mailbox and administrative auditing
-Configure mailbox audit logging; configure administrative audit logging; configure mailbox access logging; interpret all audit logs

Troubleshoot security-related issues
-Determine certificate validity; ensure proper Certificate Revocation List (CRL) access and placement; ensure private key availability; troubleshoot failed IRM protection; troubleshoot RBAC

Establish coexistence with Exchange Online
-Deploy and manage Hybrid configuration; evaluate limitations of the Hybrid Configuration Wizard; configure requirements for single sign-on (SSO); design and configure Active Directory Federation Services (AD FS)

Deploy and manage Exchange federation
-Manage Federation trusts with Microsoft Federation gateways; manage hybrid deployment OAuth-based authentication; manage sharing policies; design certificate and firewall requirements; manage organization relationships

Implement on-premises coexistence with legacy systems
-Plan namespaces for coexistence; configure proxy redirect; plan firewall configuration for coexistence; plan for mail flow requirements

Set up a cross-forest coexistence solution
-Set up cross-forest availability; design certificate and firewall requirements; set up crossforest mail flow; design and configure AutoDiscover; set up shared namespaces

Migrate legacy systems
-Determine transition paths to Exchange Server 2013; migrate public folders to Exchange Server 2013 and Office 365; migrate mailboxes; upgrade policies; plan to account for discontinued features; transition and decommission server roles

Troubleshoot issues associated with Hybrid scenarios, coexistence, migration, and Federation
-Troubleshoot Mail Flow; troubleshoot Exchange Federation trust and organization relationships; troubleshoot client access; troubleshoot SSO/AD FS; troubleshoot AADConnect; troubleshoot cross-forest availability

Configure Unified Messaging (UM)
-Configure an IP gateway; configure a UM call router; create and configure an auto attendant; configure a call answering rule; design UM for high availability; create a dial plan

Manage Unified Messaging
-Assign a dial plan to a user; move users between dial plans; enable and disable UM features for a user; set up protected voicemail; configure UM mailbox policy; manage UM language packs

Troubleshoot Unified Messaging
-Troubleshoot and configure Mutual Transport Layer Security (MTLS); monitor calls and call statistics; troubleshoot and configure QoS; troubleshoot SIP communication

Migrate Unified Messaging
-Prepare to migrate; plan a migration strategy; plan a coexistence strategy; move UM mailboxes between sites; redirect the SIP gateway to Exchange Server 2013; decommission the legacy system

Configure and manage an archiving solution
-Set up online archiving (Microsoft Office 365); create archive policies; set up on-premises archiving; plan storage for an archiving solution.

Design and configure Data Loss Prevention (DLP) solutions
-Set up pre-built rules; set up custom rules; design a DLP solution to meet business requirements; set up custom policies

Configure and administer Message Records Management (MRM)
-Design retention policies; configure retention policies; create and configure custom tags; assign policies to users; configure the Managed Folder Assistant; remove and delete tags

Perform eDiscovery
-Plan and delegate RBAC roles for eDiscovery; enable a legal/litigation hold; perform a querybased InPlace hold; design and configure journaling; perform multi-mailbox searches in Exchange Administration Center (EAC); evaluate how to integrate InPlace federated searches with Microsoft SharePoint

Implement a compliance solution
-Design and configure transport rules for ethical walls; configure MailTips; create, configure, and deploy message classifications; design and configure transport rules to meet specified compliance requirements

Manage a site-resilient Database Availability Group (DAG)
-Plan and implement Datacenter Activation Coordination (DAC); given customer node requirements, recommend quorum options; plan cross-site DAG configuration; configure DAG networks; plan a Microsoft Azure virtual machine as a witness Server

Design, deploy, and manage a site resilient CAS solution
-Plan site-resilient namespaces; configure site-resilient namespace URLs; perform steps for site *over; plan certificate requirements for site failovers; predict client behavior during a *over

Design, deploy, and manage site resilience for transport
-Configure MX records for failover scenarios; manage resubmission and reroute queues; plan and configure Send/Receive connectors for site resiliency; perform steps for transport *over

Troubleshoot site resiliency issues
-Resolve quorum issues; troubleshoot proxy redirection issues; troubleshoot client connectivity; troubleshoot mail flow; troubleshoot datacenter activation; troubleshoot DAG replication