QUESTION 11
Your network contains an Active Directory domain named fabrikam.com. You implement DirectAccess and an IKEv2 VPN. You need to view the properties of the VPN connection. Which connection properties should you view? To answer, select the appropriate connection properties in the answer area.
![clip_image001[6]](http://ccvp.info/wp-content/uploads/2014/02/clip_image0016_thumb.jpg "clip_image001[6]")
Answer:
QUESTION 12
You have a server named Server1 that runs Windows Server 2012. Server1 has the Remote Access server role installed. On Server1, you create a network policy named PPTP_Policy. You need to configure PPTP_Policy to apply only to VPN connections that use the PPTP protocol. What should you configure in PPTP Policy?
A. The Service Type
B. The Tunnel Type
C. The Framed Protocol
D. The NAS Port Type
Answer: B
QUESTION 13
Your network contains a RADIUS server named Server1. You install a new server named Server2 that runs Windows Server 2012 and has Network Policy Server (NPS) installed. You need to ensure that all accounting requests for Server2 are forwarded to Server1. On Server2, you configure a Connection Request Policy.What else should you configure on Server2? To answer, select the appropriate node in the answer area.
![clip_image004[6]](http://ccvp.info/wp-content/uploads/2014/02/clip_image0046_thumb.jpg "clip_image004[6]")
Answer:
QUESTION 14
Your network contains two Active Directory forests named contoso.com and adatum.com. The contoso.com forest contains a server named server1.contoso.com. The adatum.com forest contains a server named server2.adatum.com. Both servers have the Network Policy Server role service installed. The network contains a server named Server3. Server3 is located in the perimeter network and has the Network Policy Server role service installed. You plan to configure Server3 as an authentication provider for several VPN servers. You need to ensure that RADIUS requests received by Server3 for a specific VPN server are always forwarded to server1.contoso.com. Which two should you configure on Server3? (Each correct answer presents part of the solution. Choose two.)
A. Network policies
B. Remote RADIUS server groups
C. Connection authorization policies
D. Remediation server groups
E. Connection request policies
Answer: BE
QUESTION 15
Your network contains an Active Directory domain named fabrikam.com. You implement DirectAccess. You need to view the properties of the DirectAccess connection. Which connection properties should you view? To answer, select the appropriate connection properties in the answer area.
![clip_image007[8]](http://ccvp.info/wp-content/uploads/2014/02/clip_image0078_thumb.jpg "clip_image007[8]")
Answer:
QUESTION 16
Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2012. You enable and configure Routing and Remote Access (RRAS) on Server1. You create a user account named User1. You need to ensure that User1 can establish VPN connections to Server1. What should you do?
A. Add a RADIUS client.
B. Create a connection request policy.
C. Modify the members of the Remote Management Users group.
D. Modify the Dial-in setting of User1.
Answer: D
Explanation:
D. Access permission is also granted or denied based on the dial-in properties of each user account.
http://technet.microsoft.com/en-us/library/cc772123.aspx
QUESTION 17
Your network contains an Active Directory forest. The forest contains two domains named contoso.com and fabrikam.com. All of the DNS servers in both of the domains run Windows Server 2012. The network contains two servers named Server1 and Server2. Server1 hosts an Active Directory-integrated zone for contoso.com. Server2 hosts an Active Directory-integrated zone for fabrikam.com. Server1 and Server2 connect to each other by using a WAN link. Client computers that connect to Server1 for name resolution cannot resolve names in fabrikam.com. You need to configure Server1 to support the resolution of names in fabrikam.com. The solution must ensure that users in contoso.com can resolve names in fabrikam.com if the WAN link fails. What should you do on Server1?
A. Add a forwarder.
B. Create a stub zone.
C. Create a conditional forwarder.
D. Create a secondary zone.
Answer: D
QUESTION 18
Your network contains two servers named Server1 and Server2. Both servers run Windows Server 2012 and have the DNS Server server role installed. Server1 hosts a primary zone for contoso.com. Server2 hosts a secondary zone for contoso.com. The zone is not configure to notify secondary servers of changes automatically. You update several records on Server1. You need to force the replication of the contoso.com zone records from Server1 to Server2. What should you do from Server2?
A. Right-click Server2 and click Update Server Data Files.
B. Right-click Server2 and click Refresh.
C. Right-click the contoso.com zone and click Reload.
D. Right-click the contoso.com zone and click Transfer from Master.
Answer: D
QUESTION 19
Your network contains an Active Directory domain named contoso.com. All client computers run Windows 8. Your company has users who work from home. Some of the home users have desktop computers. Other home users have laptop computers. All of the computers are joined to the domain. All of the computer accounts are members of a group named Group1. Currently, the home users access the corporate network by using a PPTP VPN. You implement DirectAccess by using the default configuration and you specify Group1 as the DirectAccess client group. The home users who have desktop computers report that they cannot use DirectAccess to access the corporate network. The home users who have laptop computers report that they can use DirectAccess to access the corporate network. You need to ensure that the home users who have desktop computers can access the network by using DirectAccess. What should you modify?
A. The security settings of the computer accounts for the desktop computers
B. The membership of the R.AS and IAS Servers group
C. The WMI filter for Direct Access Client Settings GPO
D. The conditions of the Connections to Microsoft Routing and Remote Access server policy
Answer: C
Explanation:
C. By default, the Getting Started Wizard deploys DirectAccess to all laptops and notebook computers in the domain by applying a WMI filter to the client settings GPO http://technet.microsoft.com/en-us/library/jj574097.aspx
QUESTION 20
You have a DNS server named Server1 that has a Server Core Installation on Windows Server 2012. You need to view the time-to-live (TTL) value of a name server (NS) record that is cached by the DNS Server service on Server1. What should you run?
A. Show-DNSServerCache
B. dnscacheugc.exe
C. ipconfig.exe /displaydns
D. nslookup.exe
Answer: C
Latest Microsoft 70-411 pdf dumps can help you pass your exam surely.