Microsoft Exchange Interview
Q1. What is Exchange Online and why do companies use it?
Ideal Answer (Say like this)
Exchange Online is Microsoft’s cloud-based email service that allows organizations to host mailboxes without managing physical servers. Companies use it because it provides high availability, built-in security, automatic updates, and reduces infrastructure and maintenance costs.
Simple Understanding
No servers to manage
Microsoft handles uptime and security
Email works from anywhere
Interviewer hears
✅ Cloud understanding
✅ Business + technical reason
Q2. What happens when you assign an Exchange Online license to a user?
Ideal Answer
When an Exchange Online license is assigned, Microsoft automatically provisions a mailbox for the user. The mailbox is created in the background, email address policies are applied, and the user becomes visible in the Global Address List.
Simple Understanding
License = mailbox created automatically
No manual mailbox creation needed
Interviewer hears
✅ Licensing concept
✅ Mailbox provisioning logic
Q3. What is the difference between a User Mailbox and a Shared Mailbox?
Ideal Answer
A user mailbox is tied to a specific user account and requires a license. A shared mailbox is used by multiple users, does not require a license under 50 GB, and is accessed through permissions like Full Access and Send As.
Simple Understanding
User mailbox → personal
Shared mailbox → team mailbox (HR, Support)
Interviewer hears
✅ Cost optimization
✅ Real-world usage
Q4. What is Primary SMTP and what are Aliases?
Ideal Answer
The primary SMTP address is the main email address used to send emails. Aliases are additional email addresses that receive mail for the same mailbox but cannot send unless set as primary.
Simple Understanding
Primary SMTP = reply address
Alias = extra receiving address
Interviewer hears
✅ SMTP basics
✅ Practical mail flow knowledge
Q5. What is Mail Flow in Exchange Online?
Ideal Answer
Mail flow refers to how emails move from sender to recipient, whether internal or external. Exchange processes mail through transport services, applies mail flow rules, security checks, and then delivers the message.
Simple Understanding
Mail flow = email path
Exchange checks rules and security before delivery
Interviewer hears
✅ Core Exchange concept
✅ Transport awareness
Q6. What are Mail Flow Rules and why are they used?
Ideal Answer
Mail flow rules, also called transport rules, are used to control email behavior at the server level. They help enforce security policies like blocking attachments, adding external warning banners, or redirecting emails.
Simple Understanding
Rules work before email reaches mailbox
Used for security and compliance
Interviewer hears
✅ Security mindset
✅ Server-side control
Q7. How does internal mail flow work in Exchange Online?
Ideal Answer
Internal mail flow happens entirely within Microsoft’s cloud. Emails between users in the same tenant do not go to the internet and do not use connectors or MX records. They are delivered directly using Azure AD resolution.
Simple Understanding
Internal mail stays inside Microsoft
Faster and more secure
Interviewer hears
✅ Architecture clarity
✅ Correct routing logic
Q8. What is an External Email Warning Banner and why is it important?
Ideal Answer
An external email warning banner is added using a mail flow rule to alert users when an email comes from outside the organization. It helps users identify phishing attempts and reduces security risks.
Simple Understanding
Warns users: “This is external”
Prevents phishing clicks
Interviewer hears
✅ Security awareness
✅ Practical implementation
Q9. What is Message Trace and when do you use it?
Ideal Answer
Message Trace is a troubleshooting tool used to track the status of an email. It helps administrators check whether an email was delivered, failed, delayed, or blocked by a rule.
Simple Understanding
Used when mail is missing or delayed
Shows what happened to the email
Interviewer hears
✅ Troubleshooting skills
✅ Admin experience
Q10. What is Exchange Migration in simple terms?
Ideal Answer
Exchange migration is the process of moving mailbox data from one email system to Exchange Online while ensuring users continue to send and receive emails with minimal disruption.
Simple Understanding
Moving emails safely
No business downtime
Interviewer hears
✅ Big-picture thinking
✅ Correct definition
Q11. What is the Global Address List (GAL)?
Ideal Answer
The Global Address List is a directory that contains all mail-enabled objects such as users, shared mailboxes, distribution groups, and contacts in an organization. Outlook uses the GAL to resolve recipients when sending emails.
Simple Understanding
GAL = company email directory
Used when you type names in “To” field
Interviewer hears
✅ Directory knowledge
✅ Outlook behavior understanding
Q12. Why would you hide a mailbox from the Global Address List?
Ideal Answer
We hide mailboxes from the GAL for service accounts, admin mailboxes, or shared mailboxes that should not receive emails from users, to avoid misuse or confusion.
Simple Understanding
Some mailboxes are not for users
Hiding avoids accidental emails
Interviewer hears
✅ Security + admin hygiene
✅ Real-world usage
Q13. What is the difference between SMTP and smtp in email addresses?
Ideal Answer
Uppercase SMTP represents the primary email address used for sending emails, while lowercase smtp represents alias addresses that can receive emails but are not used for sending.
Simple Understanding
SMTP = main address
smtp = extra receiving addresses
Interviewer hears
✅ Exchange internals
✅ Address policy clarity
Q14. What are Distribution Lists and when are they used?
Ideal Answer
Distribution Lists are mail-enabled groups used to send emails to multiple recipients at once. They are commonly used for announcements, alerts, or department-wide communication.
Simple Understanding
One email → many people
No mailbox, only forwarding
Interviewer hears
✅ Group management basics
✅ Business communication understanding
Q15. Difference between Distribution List and Microsoft 365 Group?
Ideal Answer
A Distribution List is used only for email delivery, whereas a Microsoft 365 Group provides a shared mailbox, calendar, SharePoint site, and can be connected to Teams for collaboration.
Simple Understanding
DL = email only
M365 Group = email + collaboration
Interviewer hears
✅ Modern Exchange knowledge
✅ Collaboration awareness
Q16. What is Mailbox Forwarding and why is it risky?
Ideal Answer
Mailbox forwarding automatically sends emails to another address. It becomes risky when emails are forwarded externally because compromised accounts can silently leak sensitive data.
Simple Understanding
Forwarding sends copy of emails
External forwarding = data leak risk
Interviewer hears
✅ Security awareness
✅ Incident prevention mindset
Q17. What is an Archive Mailbox and why do we use it?
Ideal Answer
An archive mailbox provides additional storage for old emails without increasing the primary mailbox size. It helps organizations manage mailbox growth and retention.
Simple Understanding
Archive = storage for old mails
Keeps main mailbox clean
Interviewer hears
✅ Storage management
✅ Compliance awareness
Q18. What is Mailbox Auditing?
Ideal Answer
Mailbox auditing tracks actions performed on a mailbox, such as message deletion or access by another user. It is used for security investigations and compliance requirements.
Simple Understanding
Keeps record of mailbox activity
Used during investigations
Interviewer hears
✅ Security + compliance
✅ Audit mindset
Q19. What is an NDR and when does it occur?
Ideal Answer
An NDR, or Non-Delivery Report, is a bounce-back message sent when an email cannot be delivered due to reasons like invalid address, policy restrictions, or blocked attachments.
Simple Understanding
NDR = email delivery failed message
Tells why mail failed
Interviewer hears
✅ Troubleshooting readiness
✅ Mail flow knowledge
Q20. How do you troubleshoot when a user says “I didn’t receive an email”?
Ideal Answer
I first check Message Trace to see the delivery status. Then I verify mail flow rules, spam or quarantine, mailbox rules, and finally confirm with the sender if the email was sent successfully.
Simple Understanding
Check mail path step by step
Don’t assume — verify
Interviewer hears
✅ Structured troubleshooting
✅ Calm admin approach
Q21. What is an Accepted Domain in Exchange Online?
Ideal Answer
An accepted domain is a domain that Exchange Online is configured to receive emails for. It tells Exchange which email domains belong to the organization.
Simple Understanding
Accepted domain = company email domain
Exchange accepts mail for it
Interviewer hears
✅ Domain knowledge
✅ Mail routing basics
Q22. What is the difference between Authoritative and Internal Relay domain?
Ideal Answer
An authoritative domain means Exchange is responsible for all mailboxes in that domain. An internal relay domain means Exchange can accept emails but may forward them to another mail system if the mailbox is not found.
Simple Understanding
Authoritative → all users are here
Internal relay → some users are elsewhere
Interviewer hears
✅ Hybrid/migration awareness
✅ Correct routing logic
Q23. What is an Email Address Policy and why is it used?
Ideal Answer
An email address policy automatically assigns email addresses to users based on a standard format, such as firstname.lastname@domain.com, ensuring consistency across the organization.
Simple Understanding
Automatically creates email addresses
Keeps email format standard
Interviewer hears
✅ Automation knowledge
✅ Identity consistency
Q24. What happens if you disable automatic email address policy on a mailbox?
Ideal Answer
If automatic email address policy is disabled, the mailbox will no longer receive updates from the policy, and email addresses must be managed manually.
Simple Understanding
Exchange stops auto-updating addresses
Admin controls addresses manually
Interviewer hears
✅ Policy behavior understanding
✅ Practical admin control
Q25. What are Mail Flow Connectors and when are they required?
Ideal Answer
Mail flow connectors are used to route emails between Exchange Online and external systems, such as on-prem Exchange servers or third-party gateways. They are not required for normal internet mail flow.
Simple Understanding
Connectors = special mail routes
Needed for hybrid or partners
Interviewer hears
✅ Connector clarity
✅ Avoids common confusion
Q26. What is the difference between Inbound and Outbound Connectors?
Ideal Answer
Inbound connectors control mail coming into Exchange Online from specific sources, while outbound connectors control mail leaving Exchange Online to specific destinations.
Simple Understanding
Inbound = coming in
Outbound = going out
Interviewer hears
✅ Directional clarity
✅ Real routing understanding
Q27. What is Centralized Mail Flow?
Ideal Answer
Centralized mail flow routes all outbound internet emails through the on-premises Exchange server, allowing organizations to apply security and compliance controls in one place.
Simple Understanding
All mail goes through on-prem
One security checkpoint
Interviewer hears
✅ Hybrid knowledge
✅ Compliance mindset
Q28. What is Decentralized Mail Flow?
Ideal Answer
In decentralized mail flow, Exchange Online sends emails directly to the internet without routing through on-premises servers, reducing dependency and latency.
Simple Understanding
Cloud sends mail directly
Faster, less complex
Interviewer hears
✅ Modern architecture understanding
✅ Performance awareness
Q29. What is Quarantine in Exchange Online?
Ideal Answer
Quarantine is a secure holding area where suspicious emails are stored instead of being delivered to the mailbox, allowing admins or users to review them safely.
Simple Understanding
Suspicious emails go to quarantine
Reviewed before release
Interviewer hears
✅ Security operations
✅ User safety awareness
Q30. How do you release a quarantined email?
Ideal Answer
I review the message in the security portal, verify it is safe, and then release it either to the user or to all intended recipients, depending on policy permissions.
Simple Understanding
Check email
Release only if safe
Interviewer hears
✅ Responsible admin behavior
✅ Security-first thinking
Q31. What is a Transport Rule in Exchange Online?
Ideal Answer
A transport rule, also called a mail flow rule, is used to control and modify emails at the server level before they reach the user’s mailbox. These rules help enforce security, compliance, and organizational policies.
Simple Understanding
Rule works before email reaches mailbox
Used for security and control
Interviewer hears
✅ Server-side control
✅ Correct terminology
Q32. What is the difference between a Transport Rule and an Inbox Rule?
Ideal Answer
Transport rules are applied by Exchange on the server and affect all users, while inbox rules are created by users and apply only after the email reaches the mailbox.
Simple Understanding
Transport rule = admin rule
Inbox rule = user rule
Interviewer hears
✅ Scope clarity
✅ Admin vs user control
Q33. What does “Stop processing more rules” mean?
Ideal Answer
It stops Exchange from evaluating any further transport rules once the current rule is matched. This is used to avoid conflicts or to ensure critical rules are enforced first.
Simple Understanding
One rule applies → others stop
Prevents rule conflicts
Interviewer hears
✅ Rule priority understanding
✅ Practical usage
Q34. Why is rule priority important?
Ideal Answer
Exchange processes transport rules from top to bottom. If a higher-priority rule matches first, lower rules may never be evaluated, especially if stop processing is enabled.
Simple Understanding
Rules run in order
Order decides result
Interviewer hears
✅ Processing logic
✅ Troubleshooting mindset
Q35. What is an External Email Warning Banner?
Ideal Answer
It is a transport rule that adds a warning message to emails coming from outside the organization to alert users and reduce phishing risk.
Simple Understanding
Warns users about external emails
Helps prevent phishing
Interviewer hears
✅ Security awareness
✅ Real-world implementation
Q36. Why might an external banner rule not work?
Ideal Answer
Common reasons include the rule being disabled, not set to enforce mode, incorrect sender condition, exceptions blocking the sender, or another rule stopping processing before it.
Simple Understanding
Rule disabled or misconfigured
Another rule blocking it
Interviewer hears
✅ Troubleshooting logic
✅ Real admin experience
Q37. What is attachment blocking and why is it used?
Ideal Answer
Attachment blocking prevents certain file types, like executables, from being delivered to users to reduce malware and ransomware risks.
Simple Understanding
Stops dangerous files
Protects users
Interviewer hears
✅ Security-first thinking
✅ Threat awareness
Q38. What is Message Trace used for?
Ideal Answer
Message Trace is used to track the journey of an email and determine whether it was delivered, delayed, blocked, or failed, along with the reason.
Simple Understanding
Shows what happened to email
Used for troubleshooting
Interviewer hears
✅ Diagnostic skill
✅ Admin readiness
Q39. How do you identify if a transport rule blocked an email?
Ideal Answer
By checking Message Trace details, where the applied rule and failure reason are listed for the message.
Simple Understanding
Message trace shows rule name
Confirms block reason
Interviewer hears
✅ Evidence-based troubleshooting
✅ Exchange internals knowledge
Q40. What is email header analysis and when do you use it?
Ideal Answer
Email header analysis involves reviewing message headers to trace the path of an email, identify spam filtering, routing decisions, and authentication results. It’s used when Message Trace is not enough.
Simple Understanding
Headers show email journey
Used for deep troubleshooting
Interviewer hears
✅ Advanced troubleshooting
✅ Technical depth
Q41. What is Spam and how does Exchange Online handle it?
Ideal Answer
Spam is unwanted or bulk email. Exchange Online handles spam using built-in anti-spam policies that analyze sender reputation, message content, and behavior before delivering or quarantining the email.
Simple Understanding
Spam = unwanted emails
Exchange checks and filters automatically
Interviewer hears
✅ Security fundamentals
✅ Cloud protection awareness
Q42. What is the difference between Spam and Phishing?
Ideal Answer
Spam is usually promotional or unwanted email, while phishing is a malicious attempt to steal credentials or data by impersonating a trusted sender.
Simple Understanding
Spam = annoying
Phishing = dangerous
Interviewer hears
✅ Threat differentiation
✅ Security maturity
Q43. What is Quarantine and who can access it?
Ideal Answer
Quarantine is a secure location where suspicious emails are stored. Depending on policy, either admins or users can review and release emails from quarantine.
Simple Understanding
Suspicious emails go to quarantine
Reviewed before delivery
Interviewer hears
✅ Security operations
✅ Policy awareness
Q44. What is an Anti-Spam Policy in Exchange Online?
Ideal Answer
An anti-spam policy defines how Exchange Online handles inbound and outbound spam, including actions like moving emails to junk, quarantine, or blocking senders.
Simple Understanding
Policy decides what happens to spam
Applied automatically to users
Interviewer hears
✅ Policy-based control
✅ Exchange protection knowledge
Q45. What is Outbound Spam and why is it important?
Ideal Answer
Outbound spam occurs when internal accounts send spam, often due to compromise. Monitoring outbound spam helps detect hacked accounts and prevents the tenant from being blacklisted.
Simple Understanding
Outbound spam = internal account issue
Helps detect hacked users
Interviewer hears
✅ Incident detection mindset
✅ Tenant reputation awareness
Q46. How do you handle a phishing email reported by a user?
Ideal Answer
I first analyze the email, check headers and message trace, confirm it’s phishing, remove similar emails from other mailboxes if required, and block the sender or domain.
Simple Understanding
Check → confirm → clean → block
Interviewer hears
✅ Incident response
✅ Calm, structured approach
Q47. What is an Archive Mailbox vs Retention Policy?
Ideal Answer
An archive mailbox stores older emails separately for the user, while a retention policy controls how long emails are kept or deleted based on compliance requirements.
Simple Understanding
Archive = storage
Retention = rule for keeping/deleting
Interviewer hears
✅ Compliance basics
✅ Data lifecycle understanding
Q48. What is Litigation Hold in simple terms?
Ideal Answer
Litigation Hold preserves mailbox data so that emails cannot be permanently deleted, even by the user, for legal or compliance reasons.
Simple Understanding
Emails cannot be erased
Used for legal cases
Interviewer hears
✅ Compliance awareness
✅ Correct terminology
Q49. What is Exchange Migration in one sentence?
Ideal Answer
Exchange migration is the process of moving mailboxes from one email system to Exchange Online while maintaining mail flow and minimizing user impact.
Simple Understanding
Moving emails safely
Business keeps running
Interviewer hears
✅ Clear definition
✅ Big-picture thinking
Q50. What is IMAP Migration and when do you use it?
Ideal Answer
IMAP migration is used to move email data from non-Exchange systems like cPanel or Gmail to Exchange Online, but it migrates only emails, not calendars or contacts.
Simple Understanding
Used for non-Exchange systems
Email only
Interviewer hears
✅ Correct migration choice
✅ Practical experience
Q51. What are the different Exchange migration types you know?
Ideal Answer
The main migration types are Cutover, Hybrid (Remote Move), IMAP, Google Workspace migration, and Cross-tenant migration. The choice depends on the source system, number of users, and coexistence requirements.
Simple Understanding
Different paths for different situations
No single “best” type
Interviewer hears
✅ Decision-making ability
✅ Awareness of options
Q52. What is Cutover Migration and when do you use it?
Ideal Answer
Cutover migration moves all mailboxes to Exchange Online at the same time. It is usually used for small organizations where coexistence is not required.
Simple Understanding
All users move together
Simple but risky for large orgs
Interviewer hears
✅ Correct use case
✅ Risk awareness
Q53. What is Hybrid Migration in simple terms?
Ideal Answer
Hybrid migration allows on-premises Exchange and Exchange Online to work together, so mailboxes can be moved gradually while users continue working normally.
Simple Understanding
On-prem + cloud together
No big downtime
Interviewer hears
✅ Enterprise knowledge
✅ Coexistence concept
Q54. Why is Hybrid Migration preferred in large organizations?
Ideal Answer
Because it provides seamless coexistence, supports gradual mailbox moves, preserves user experience, and avoids business disruption.
Simple Understanding
Smooth transition
No user complaints
Interviewer hears
✅ Business continuity thinking
✅ Enterprise mindset
Q55. What is a Migration Endpoint?
Ideal Answer
A migration endpoint defines how Exchange Online connects to the source mail system, including server address, authentication, and encryption settings.
Simple Understanding
Connection details
Bridge between source and cloud
Interviewer hears
✅ Migration internals
✅ Correct terminology
Q56. What information is required in an IMAP migration CSV file?
Ideal Answer
The CSV file contains the target mailbox address, source IMAP username, and password, which maps each source mailbox to its destination mailbox.
Simple Understanding
Tells Exchange “who moves where”
Interviewer hears
✅ Practical experience
✅ Hands-on knowledge
Q57. What are Migration Batch statuses and what do they mean?
Ideal Answer
Common statuses include Syncing, Synced, Failed, and Completed. Syncing means data is copying, Synced means ready for cutover, and Completed means migration is finished.
Simple Understanding
Sync first, cutover later
Interviewer hears
✅ UI familiarity
✅ Migration lifecycle knowledge
Q58. How does mail flow work during migration?
Ideal Answer
During migration, mail continues to flow through the existing mail system until cutover. After cutover, mail flow is redirected to Exchange Online by updating MX records.
Simple Understanding
Mail never stops
Route changes at final step
Interviewer hears
✅ Mail continuity understanding
✅ DNS awareness
Q59. What are common migration issues you may face?
Ideal Answer
Common issues include incorrect credentials, large mailboxes, throttling, network connectivity problems, and identity mismatches.
Simple Understanding
Mostly preparation or credential issues
Interviewer hears
✅ Real-world exposure
✅ Problem awareness
Q60. How do you validate migration success after completion?
Ideal Answer
I verify that emails are accessible, mail flow is working, Outlook connects correctly, and users can send and receive emails without issues.
Simple Understanding
Check emails
Check sending and receiving
Interviewer hears
✅ Post-migration responsibility
✅ Support mindset
Q61. What is a Mail Flow Connector in Exchange Online?
Ideal Answer
A mail flow connector defines a special routing path for emails between Exchange Online and another mail system, such as an on-prem Exchange server or a third-party email gateway.
Simple Understanding
Connector = special email route
Used when default internet routing is not enough
Interviewer hears
✅ Routing clarity
✅ Hybrid / integration awareness
Q62. When do you NOT need a connector?
Ideal Answer
Connectors are not required for normal internet email flow. Exchange Online can send and receive emails directly using MX records unless there is a hybrid setup or a specific routing requirement.
Simple Understanding
Normal email works without connectors
Connectors are only for special cases
Interviewer hears
✅ Avoids common misconception
✅ Practical knowledge
Q63. What is an Inbound Connector?
Ideal Answer
An inbound connector controls emails coming into Exchange Online from a specific source, such as an on-prem server or trusted partner system.
Simple Understanding
Inbound = mail coming into Exchange Online
Interviewer hears
✅ Directional understanding
✅ Secure mail intake
Q64. What is an Outbound Connector?
Ideal Answer
An outbound connector controls emails leaving Exchange Online to a specific destination, such as routing mail through an on-prem server or a smart host.
Simple Understanding
Outbound = mail leaving Exchange Online
Interviewer hears
✅ Correct routing logic
✅ Hybrid readiness
Q65. What is a Smart Host and when is it used?
Ideal Answer
A smart host is a mail server that Exchange Online sends emails through instead of sending them directly to the internet. It is commonly used for security scanning or compliance purposes.
Simple Understanding
Smart host = middle mail server
Used for filtering or logging
Interviewer hears
✅ Security integration knowledge
✅ Enterprise design awareness
Q66. What is TLS and why is it important in mail flow?
Ideal Answer
TLS encrypts email communication between mail servers, protecting email content from being intercepted during transmission.
Simple Understanding
TLS = encrypted email transfer
Interviewer hears
✅ Security fundamentals
✅ Compliance awareness
Q67. What is the difference between Opportunistic TLS and Forced TLS?
Ideal Answer
Opportunistic TLS attempts encryption if supported by the other server, while Forced TLS requires encryption and rejects email if TLS is not available.
Simple Understanding
Opportunistic = try encryption
Forced = encryption is mandatory
Interviewer hears
✅ Deep routing security knowledge
✅ Correct terminology
Q68. What is Centralized Mail Flow in Hybrid Exchange?
Ideal Answer
Centralized mail flow routes all outbound internet emails through the on-prem Exchange server, allowing organizations to apply centralized security and compliance controls.
Simple Understanding
All mail goes through on-prem
One control point
Interviewer hears
✅ Hybrid design understanding
✅ Compliance mindset
Q69. What is Decentralized Mail Flow and why is it used?
Ideal Answer
In decentralized mail flow, Exchange Online sends emails directly to the internet, reducing dependency on on-prem infrastructure and improving performance.
Simple Understanding
Cloud sends mail directly
Faster and simpler
Interviewer hears
✅ Modern architecture thinking
✅ Performance awareness
Q70. How do you troubleshoot mail flow issues related to connectors?
Ideal Answer
I verify connector configuration, check message trace to see which connector was used, review email headers, and confirm TLS or smart host settings.
Simple Understanding
Check route
Check trace
Check headers
Interviewer hears
✅ Structured troubleshooting
✅ Real admin confidence
Q71. What is SPF and why is it important in Exchange Online?
Ideal Answer
SPF is an email authentication method that specifies which mail servers are allowed to send emails on behalf of a domain. It helps prevent spoofing and phishing.
Simple Understanding
SPF tells the internet: “These servers can send mail for my domain”
Stops fake senders
Interviewer hears
✅ Email authentication basics
✅ Anti-spoofing knowledge
Q72. What is DKIM and how does it work?
Ideal Answer
DKIM digitally signs outgoing emails so the receiving server can verify that the message was not altered and is genuinely from the sending domain.
Simple Understanding
DKIM = digital signature for emails
Confirms email integrity
Interviewer hears
✅ Message integrity awareness
✅ Security fundamentals
Q73. What is DMARC in simple terms?
Ideal Answer
DMARC defines what should happen if SPF or DKIM checks fail. It helps domain owners protect their domain from misuse and phishing.
Simple Understanding
DMARC decides: allow, quarantine, or reject
Protects brand identity
Interviewer hears
✅ Authentication alignment
✅ Security maturity
Q74. What is the difference between Junk Email and Quarantine?
Ideal Answer
Junk email is delivered to the user’s mailbox in the Junk folder, while quarantined emails are held securely and require admin or user review before release.
Simple Understanding
Junk = user can see
Quarantine = blocked and reviewed
Interviewer hears
✅ Correct filtering logic
✅ User experience awareness
Q75. What is a Phishing Attack and how do you handle it?
Ideal Answer
A phishing attack tries to steal user credentials by impersonating a trusted source. I analyze the email, confirm phishing indicators, remove similar emails, and block the sender or domain.
Simple Understanding
Fake email pretending to be real
Check → remove → block
Interviewer hears
✅ Incident response thinking
✅ Security handling
Q76. What is Mailbox Auditing used for?
Ideal Answer
Mailbox auditing tracks actions performed on a mailbox, such as access or deletion, and is used for security investigations and compliance requirements.
Simple Understanding
Keeps record of mailbox actions
Used when something goes wrong
Interviewer hears
✅ Audit & compliance mindset
✅ Investigation readiness
Q77. What is Litigation Hold and when do you use it?
Ideal Answer
Litigation Hold preserves all mailbox data so that emails cannot be permanently deleted, even by the user, and is used for legal or regulatory requirements.
Simple Understanding
Emails are locked
Cannot be erased
Interviewer hears
✅ Legal compliance knowledge
✅ Correct usage
Q78. What is the difference between Litigation Hold and Retention Policy?
Ideal Answer
Litigation Hold preserves all mailbox data indefinitely, while retention policies define how long emails are kept or deleted based on organizational rules.
Simple Understanding
Litigation Hold = legal case
Retention = company policy
Interviewer hears
✅ Data lifecycle understanding
✅ Compliance clarity
Q79. What are common Exchange Online service limits you should know?
Ideal Answer
Common limits include mailbox size, message size, and sending limits. Knowing these helps troubleshoot delivery issues and user complaints.
Simple Understanding
Exchange has limits
Limits explain many problems
Interviewer hears
✅ Practical admin awareness
✅ Troubleshooting readiness
Q80. How do you handle a user complaint: “My emails are going to spam”?
Ideal Answer
I check message trace, review spam filtering results, validate SPF/DKIM/DMARC configuration, and adjust policies if required.
Simple Understanding
Check delivery
Check authentication
Fix policy
Interviewer hears
✅ Structured troubleshooting
✅ Security + mail flow knowledge
Q81. What is the difference between Basic Message Trace and Extended Message Trace?
Ideal Answer
Basic message trace is used to track recent emails quickly, while extended message trace provides detailed tracking for older emails and generates a downloadable report for deeper analysis.
Simple Understanding
Basic = quick check
Extended = deep investigation
Interviewer hears
✅ Troubleshooting depth
✅ Tool awareness
Q82. When would you use Extended Message Trace instead of Basic?
Ideal Answer
I use extended message trace when emails are older than a few days, when I need detailed routing information, or when management requires a report for audit purposes.
Simple Understanding
Old emails or reports → extended trace
Interviewer hears
✅ Real admin judgment
✅ Audit mindset
Q83. What does “Delivered”, “Failed”, and “Pending” mean in Message Trace?
Ideal Answer
Delivered means the email reached the mailbox, Failed means it was blocked or rejected, and Pending means delivery is delayed or still processing.
Simple Understanding
Delivered = reached user
Failed = blocked
Pending = waiting
Interviewer hears
✅ Correct interpretation
✅ Support confidence
Q84. How do you identify whether an email was blocked by a rule or by spam filtering?
Ideal Answer
I check the Message Trace details to see the event type and applied policy or rule, which clearly indicates whether the block was due to a transport rule or spam filtering.
Simple Understanding
Trace tells who blocked it
Interviewer hears
✅ Evidence-based troubleshooting
✅ Exchange internals
Q85. What is an NDR code like 550 or 5.7.1 and what does it indicate?
Ideal Answer
NDR codes indicate why an email failed. For example, 550 usually means the address doesn’t exist, while 5.7.1 indicates a policy or permission issue.
Simple Understanding
NDR code = failure reason
Interviewer hears
✅ Mail flow fundamentals
✅ Error interpretation
Q86. What is email header analysis and why is it important?
Ideal Answer
Email header analysis helps trace the path of an email, identify routing decisions, spam filtering results, and authentication checks like SPF and DKIM.
Simple Understanding
Headers show email journey
Interviewer hears
✅ Advanced troubleshooting
✅ Security awareness
Q87. During migration, some users report missing emails—what do you check first?
Ideal Answer
I check migration batch status, review failed items, verify the source mailbox, and ensure the batch completed successfully before cutover.
Simple Understanding
Check migration status first
Interviewer hears
✅ Calm migration handling
✅ Logical approach
Q88. What is throttling in Exchange Online and how does it affect migration?
Ideal Answer
Throttling limits the speed of data transfer to protect service performance. During migration, it can slow down mailbox syncing, especially for large batches.
Simple Understanding
Exchange slows things down to stay stable
Interviewer hears
✅ Cloud behavior understanding
✅ Real-world experience
Q89. How do you handle large mailboxes during migration?
Ideal Answer
I migrate them separately or in smaller batches, monitor progress closely, and allow more time to avoid throttling or failures.
Simple Understanding
Big mailboxes need special care
Interviewer hears
✅ Planning ability
✅ Risk mitigation
Q90. How do you explain a migration delay to business users?
Ideal Answer
I explain that data is syncing securely in the background, reassure them that no data is lost, and provide a realistic timeline without technical jargon.
Simple Understanding
Be honest
Be calm
Reassure users
Interviewer hears
✅ Communication skills
✅ Professional maturity
Q91. What is the Exchange Admin Center and what is it mainly used for?
Ideal Answer
The Exchange Admin Center is the web-based portal used to manage Exchange Online. It allows administrators to manage mailboxes, mail flow, security, migration, and troubleshooting from a single interface.
Simple Understanding
Control panel for Exchange
Everything email-related is managed here
Interviewer hears
✅ Tool familiarity
✅ Admin readiness
Q92. What is the difference between Exchange Admin Center and Microsoft 365 Admin Center?
Ideal Answer
The Microsoft 365 Admin Center is used for user and license management, while the Exchange Admin Center is specifically used for email, mail flow, and Exchange-related configurations.
Simple Understanding
M365 Admin Center = users & licenses
EAC = email & mail flow
Interviewer hears
✅ Clear role separation
✅ Platform understanding
Q93. What is a Shared Mailbox and why is it cost-effective?
Ideal Answer
A shared mailbox allows multiple users to access a common mailbox without requiring a license if it is under 50 GB, making it cost-effective for teams like HR or support.
Simple Understanding
One mailbox, many users
No license needed (under limit)
Interviewer hears
✅ Cost optimization
✅ Practical admin thinking
Q94. How do permissions work on a Shared Mailbox?
Ideal Answer
Permissions such as Full Access, Send As, and Send on Behalf are assigned to users, allowing them to read and send emails from the shared mailbox.
Simple Understanding
Permissions decide what users can do
Interviewer hears
✅ Delegation knowledge
✅ Access control understanding
Q95. What is Mailbox Delegation and when is it used?
Ideal Answer
Mailbox delegation allows one user to access another user’s mailbox, commonly used by executives and assistants to manage emails and calendars.
Simple Understanding
Someone else helps manage your mailbox
Interviewer hears
✅ Real-world usage
✅ Role-based access
Q96. What is POP and IMAP, and why do organizations restrict them?
Ideal Answer
POP and IMAP are legacy email protocols. Organizations often restrict them because they do not support modern security controls like MFA and are more vulnerable to attacks.
Simple Understanding
Old email methods
Less secure
Interviewer hears
✅ Security awareness
✅ Modern best practices
Q97. What is the Global Address List used for in Outlook?
Ideal Answer
The Global Address List is used by Outlook to search and resolve internal recipients, making it easier for users to send emails within the organization.
Simple Understanding
Company email directory
Interviewer hears
✅ User experience awareness
✅ Directory knowledge
Q98. What is DNS and why is it important for Exchange Online?
Ideal Answer
DNS records like MX, SPF, DKIM, and Autodiscover are essential for routing emails correctly, authenticating senders, and configuring Outlook automatically.
Simple Understanding
DNS tells the internet how email works
Interviewer hears
✅ Mail routing fundamentals
✅ Configuration awareness
Q99. How do you ensure Exchange Online is secure?
Ideal Answer
By using strong authentication, disabling legacy protocols, configuring spam and phishing policies, monitoring mail flow, and educating users.
Simple Understanding
Security = settings + monitoring + users
Interviewer hears
✅ Security-first mindset
✅ Practical experience
Q100. How would you describe your Exchange experience in an interview?
Ideal Answer
I have hands-on experience managing Exchange Online, including mailbox administration, mail flow rules, security policies, troubleshooting, and migration basics, while following best practices to ensure stability and security.
Simple Understanding
Confident summary
Honest and professional
Interviewer hears
✅ Self-awareness
✅ Confidence without exaggeration