[单项选择]Your network contains a Routing and Remote Access server named RRAS1 and a DHCP server named DHCP1. RRAS1 and DHCP1 are located in different subnets.RRAS1 is configured to support VPN connections from the Internet. DHCP1 has a scope that provides IP addresses for the VPN connections.You need to ensure that VPN clients that connect to RRAS1 can receive IP addresses from DHCP1.What should you do？（）
A. On DHCP1, configure a DHCP Relay Agent.
B. On DHCP1, install the Routing role service.
C. On RRAS1, configure a DHCP Relay Agent.
D. On RRAS1, install the Routing role service.

[单项选择]Your network contains a Network Policy Server (NPS) named Server1.NPS1 provides authentication for all of the VPN servers on the network.You need to track the usage information of all VPN connections.Which RADIUS attribute should you log？（）
A. Acct-Session-Id
B. Acct-Status-Type
C. Class
D. NAS-Identifier

[单项选择]Your network contains a Network Policy Server (NPS) named Server1. Server1 is configured to use SQL logging.You add a second NPS server named Server2.You need to ensure that Server2 has the same RADIUS authentication and logging settings as Server1.You export the NPS settings from Server1, and then import the settings to Server2.What should you do next on Server2？（）
A. Create a new ODBC data source.
B. Run netsh.exe nps reset config.
C. Manually configure the SQL logging settings.
D. Restart the Network Policy Server (NPS) role service.

[单项选择]Your network contains a wired network and a wireless network. Users report that they experience intermittent problems accessing network resources when they connect to the internal wireless network. You discover that an unsecured rogue wireless access point uses the same Service Set Identifier (SSID) as the internal wireless network. You need to ensure that the users only connect to the internal wireless network. What should you do?（）
A. Configure a Windows Connect Now Group Policy.
B. Configure a Wireless Network (IEEE 802.11) Policy.
C. Delete the rogue network from the Network and Sharing Center on each computer.
D. Create a Connection Manager Administration Kit (CMAK) profile and deploy it to all users.

[单项选择]Which remote access VPN addressing technique supports a static IP address to support a specific application?（）
A. Use a staticip addresses based on incoming user policies.
B. Use DHCP to assign addresses based on incoming user policies.
C. Deploy a clientless model to assign a unique address to the user.
D. Deploy RADIUS or LDAP to assign the address to the user.

[多项选择]Which two secure remote access methods are available on the WX platforms?（） (Choose two.)
A. SSL
B. SSH
C. Telnet
D. HTTP

[单项选择]Your network contains two Active Directory forests named contoso.com and fabrikam.com.You have a standalone Network Policy Server (NPS) named NPS1.You have a VPN server named VPN1. VPN1 is configured as a RADIUS client to NPS1.You need to ensure that users from both forests can establish VPN connections by using their own domain accounts.What should you do？（）
A. On NPS1, configure remediation server groups.
B. On NPS1, configure connection request policies.
C. On VPN1, modify the DNS suffix search order.
D. On VPN1, modify the IKEv2 Client connection controls.

[单项选择]When is the site-to-site remote access model appropriate? （）
A. for multiple ISDN connections
B. for modem concentrated dial-up connections
C. for a group of users in the same vicinity sharing a connection
D. for use by mobile users

[单项选择]What is the primary use of a remote access VPN?（）
A. to secure communication between two remote PCs
B. to secure communication between two remote offices
C. to secure communication betweenan remote PC and the corporate intranet
D. to secure communication between a corporate intranet and the public internet

[单项选择]Your network contains an Active Directory forest. The functional level of the forest is Windows Server 2008 R2.You plan to deploy DirectAccess.You need to configure the DNS servers on your network to support DirectAccess.What should you do？（）
A. Modify the GlobalQueryBlockList registry key and restart the DNS Server service.
B. Modify the EnableGlobalNamesSupport registry key and restart the DNS Server service.
C. Create a trust anchor that uses a certificate issued by an internal certification authority (CA).
D. Create a trust anchor that uses a certificate issued by a publicly trusted certification authority (CA).

[多项选择]Your network contains an Active Directory domain. The network has DirectAccess deployed.You deploy the DirectAccess Connectivity Assistant (DCA) to all client computers.You need to ensure that users can view their DirectAccess status by using the DCA.Which two group policy settings should you configure？（）
A. Dynamic Tunnel Endpoints (DTEs)
B. Corporate Portal Site
C. Corporate Resources
D. PortalName

[单项选择]Your network contains a client computer named Computer1 that runs Windows 7. Computer1 is configured to use DirectAccess. You need to identify the URL of the network location server that Computer1 is configured to use. What should you do？（）
A. From a command prompt, run ipconfig.exe /displaydns.
B. From a command prompt, run netsh.exe namespace show policy.
C. From Control Panel, run the network adapter troubleshooter.
D. From the Network Connection Status window, view the Network Connection Details.

[单项选择]Your network contains one active directory domain. You have a member server that runs windows server 2008. You need to immediately disable all incoming connections to the server. What should you do?（）
A. From the services snap-in disable the IP helper.
B. From the services snp-in disable the net logon service.
C. From windows firewall. Enable the block all connections option on the public profile.
D. From the windows firewall, enable the block all connections option on the domain profile.

[单项选择]Your network contains an Active Directory domain named contoso.com. The network has DirectAccess deployed.You deploy a new server named Server1 that hosts a management application.You need to ensure that Server1 can initiate connections to DirectAccess client computers.Which settings should you modify from the DirectAccess Setup console？（）
A. Application Servers
B. DirectAccess Server
C. Infrastructure Servers
D. Remote Clients

[单项选择]Your network contains one Active Directory domain. You have a member server named Server1 that runs Windows Server 2008 R2. The server has the Routing and Remote Access Services role service installed.You implement Network Access Protection (NAP) for the domain.You need to configure the Point-to-Point Protocol (PPP) authentication method on Server1.Which authentication method should you use？（）
A. Challenge Handshake Authentication Protocol (CHAP)
B. Extensible Authentication Protocol (EAP)
C. Microsoft Challenge Handshake Authentication Protocol version 2 (MS-CHAP v2)
D. Password Authentication Protocol (PAP)