Overview
Fabrikam, Inc. is a consulting company that has a main office in Montreal.
Fabrikam has a partnership with a company named Litware, Inc.
Existing Environment
Network Environment
The on-premises network of Fabrikam contains an Active Directory domain named fabrikam.com.
Fabrikam has a Microsoft 365 tenant named fabrikam.com. All users have Microsoft 365 Enterprise E5 licenses.
User accounts sync between Active Directory Domain Services (AD DS) and the Microsoft 365 tenant.
Fabrikam.com contains the users and devices shown in the following table.
Fabrikam currently leases mobile devices from several mobile operators.
Microsoft Exchange Online Environment
All users are assigned an Outlook Web App policy named FilesPolicy.
In-Place Archiving is disabled for Exchange Online.
You have the users shown in the following table.
User1 and User3 use Microsoft Outlook for iOS and Android to access email from their mobile device.
User2 uses a native Android email app.
A Safe Links policy in Microsoft Defender for Office 365 is applied to the fabrikam.com tenant. The marketing department uses a mail-enabled public folder named FabrikamProject.
Default MRM Policy is disabled for the fabrikam.com tenant.
Problem Statements
Fabrikam identifies the following issues:
1. Users report that they receive phishing emails containing embedded links.
2. Users download and save ASPX files when they use Outlook on the web.
3. Email between Fabrikam and Litware is unencrypted during transit.
4. User2 reports that he lost his mobile device.
Requirements
Planned Changes
Fabrikam plans to implement the following changes:
1. Configure FilesPolicy to prevent Outlook on the web users from downloading attachments that have the
ASPX extension.
2. Purchase a new smartboard and configure the smartboard as a booking resource in Exchange Online.
3. Ensure that the new smartboard can only be booked for a maximum of one hour.
4. Allow only Admin1 to accept or deny booking requests for the new smartboard.
5. Standardize mobile device costs by moving to a single mobile device operator.
6. Migrate the FabrikamProject public folder to Microsoft SharePoint Online.
7. Enable In-Place Archiving for users in the marketing department.
8. Encrypt all email between Fabrikam and Litware.
Technical Requirements
Fabrikam identifies the following technical requirements:
1. Ensure that the planned Sharepoint site for FabrikamProject only contains content that was created during the last 12 months.
2. Any existing file types that are currently configured as blocked or allowed in the FilesPolicy policy must remain intact.
3. When users leave the company, remove their licenses and ensure that their mailbox is accessible to Admin1 and Admin2.
4. Generate a report that identifies mobile devices and the mobile device operator of each device.
5. Use the principle of least privilege.
6. Minimize administrative effort.
Retention requirements
Fabrikam identifies the following retention requirements for all users:
1. Enable users to tag items for deletion after one year.
2. Enable users to tag items for deletion after two years.
3. Enable users to tag items to be archived after one year.
4. Automatically delete items in the Junk Email folder after 30 days.
5. Automatically delete items in the Sent Items folder after 300 days.
6. Ensure that any items without a retention tag are moved to the Archive mailbox two years after they were created and permanently deleted seven years after they were created.
