MSCE French key terms

A configuration object on a Mailbox server or Edge Transport server that defines how outbound email leaves the organization, including address space, source server, cost, and smart host settings.

A configuration object defining how a server accepts inbound SMTP connections, scoped by local IP binding, remote IP ranges, port, and authentication or TLS requirements.

The set of recipient domains or SMTP addresses a connector or transport rule matches, expressed as a domain, wildcard, or address range used for routing decisions.

A DNS resource record that publishes the hostnames and preference values of mail servers willing to accept email for a domain, guiding external senders toward the correct entry point.

A role installed in a perimeter network that handles internet mail flow, applies anti-spam and transport rules, and relays messages between the internet and internal Mailbox servers without hosting mailboxes.

A process that replicates recipient and configuration data from the internal organization to an Edge Transport server and establishes secure, authenticated mail flow between the perimeter and internal servers.

A domain configured in the organization as authoritative, internal relay, or external relay, determining whether the server accepts mail for its recipients and how it treats unknown addresses.

An accepted domain for which the organization hosts all recipients, so mail to unknown addresses in that domain is rejected rather than relayed elsewhere.

A configuration entry that controls message settings for a specific external domain, such as automatic replies, out-of-office responses, and message formatting for recipients outside the organization.

A server-side mail flow rule that inspects message attributes such as senders, recipients, keywords, and attachments, then applies actions like blocking, redirecting, adding disclaimers, or modifying headers.

A system-generated message reporting delivery success, delay, or failure for a sent message, controlled by per-recipient or organizational settings that determine which notifications are returned.

A high-availability mechanism that keeps a redundant copy of a message on another transport server until the primary server confirms successful delivery, reducing message loss during failures.

A transport feature that temporarily retains copies of successfully delivered messages so an administrator can resubmit them after a mailbox database failover or server outage.

A permitted mail flow path that lets unauthenticated external systems send mail through the organization to specific domains or recipients, typically configured on a dedicated receive connector.

A transport setting where servers attempt an encrypted SMTP session with a self-signed or configured certificate and fall back to unencrypted delivery when the remote side does not support TLS.

An authentication model in which both the sending and receiving SMTP servers present certificates that each side validates, confirming identity before encrypted mail is exchanged.

A DNS TXT record listing the hosts authorized to send email for a domain, allowing receivers to detect and reject or flag messages sent by unauthorized servers.

A cryptographic signature added to message headers using a domain key, letting receivers verify that the message originated from the claimed domain and was not altered in transit.

A DNS-published policy that combines SPF and DKIM results with alignment checks and instructs receivers how to handle failing mail, plus where to send aggregate reports.

A set of protections that detect impersonation of users, domains, and trusted senders, applying actions such as quarantine, move to junk, or header tagging.

A configuration that defines which detected threats are held for review, how long they are retained, and whether recipients or administrators receive notification and can release them.

A rule set that identifies sensitive information types in messages and attachments and enforces actions such as blocking, encrypting, notifying users, or generating incident reports.

A collection of retention tags applied to mailboxes that determines how long items are kept and what happens afterward, such as moving to archive or deleting permanently.

An individual setting that specifies a retention age and an action for messages, applied by policy to default folders, personal folders, or the entire mailbox.

A mailbox-level hold that preserves deleted and modified items for a specified or indefinite period, retaining original versions so they remain discoverable during legal proceedings.

A hold applied through a query-based discovery search that preserves items matching specified criteria such as keywords, dates, or senders across selected mailboxes.

A query-based search across mailboxes and archives that locates content for investigation or legal response, with options to place matching items on hold or export results.

A configuration that captures copies of messages matching defined scope, such as all mail or specific recipients, and delivers them to a journaling mailbox or external archive.

A dedicated mailbox that receives journal reports containing captured message copies, used by compliance systems or third-party archiving tools for retention and review.

An additional mailbox store associated with a user that holds older messages separately from the primary mailbox, supporting retention policies and user access through Outlook and web clients.

A group of Mailbox servers that share replicated copies of mailbox databases and provide automatic failover, continuous replication, and switchover for high availability.

A replicated instance of a mailbox database hosted on another server in a database availability group, maintained through log shipping and replay to enable rapid activation.

A passive database copy configured with a replay lag time so it intentionally trails the active copy, providing a recovery point against logical corruption or accidental deletion.

The component that tracks database and server health within a database availability group and decides which copy should be active during failover or switchover.

A server outside the database availability group that provides a tie-breaking vote for quorum when the group has an even number of members, helping avoid split-brain conditions.

A digital credential used by transport and client services to prove server identity and enable encryption, requiring correct subject names, trust chain, and services assigned.

The set of mechanisms, such as TLS certificates, Kerberos, NTLM, or basic authentication, that a receive or send connector uses to verify the identity of the connecting party.

A managed unit of work that moves mailboxes or content from a source system to the target organization, tracking status, errors, and completion for each included user.

A migration approach that moves all mailboxes from a source system to the target in a single batch, then switches mail flow and client access at once.

A coexistence configuration linking an on-premises organization with a cloud service so mailboxes remain in both environments while sharing address routing, free/busy, and unified directory data.