MCSA WINDOWS SERVER 2016 - CHAP 6
When configuring a VPN server to automatically assign IP addresses to remote clients, how many IP addresses are in a single pool allocated by the VPN server?
10
Each type of VPN service within RRAS can support up to a maximum of how many connections or ports?
128
In order to allow Remote Desktop Protocol (RDP) access to DirectAccess clients, which port below must be opened on the client side firewall?
3389
The IPsec Encapsulating Security Payload (ESP) protocol uses what IP protocol ID?
50
What UDP port is used for IKE traffic from VPN client to server?
500
What type of interface is activated when a client attempts to connect to the Internet?
Demand-dial interface
By default, the NPS Network Policy is configured to allow access to all users. True or False?
False
VPN connection settings cannot be changed on a domain-wide basis using group policy. True or False?
False
What PowerShell cmdlet can be used to add a static route?
New-NetRoute
Select below the VPN tunnel type that uses Generic Routing Encapsulation based tunnels and CHAP / EAP authentication:
PPTP
A Kerberos proxy allows a client computer to authenticate to a domain controller, using the DirectAccess server as a proxy. True or False?
True
A perimeter network is a boundary between the private network and the public Internet where most resources available to the Internet, such as mail, web, DNS, and VPN servers, are located. True or False?
True
By default, all three tunnel types are enabled when Windows Server 2016 is configured as a VPN server. True or False?
True
The RIPv2 routing protocol uses hop count as its metric for routing packets in a network. True or False?
True
When DirectAccess clients are connected to the Internet, the name resolution policy table (NRPT) makes sure that DNS requests for intranet resources are directed to internal DNS servers, not Internet DNS servers. True or False?
True
In the Point-to-Point-Tunneling Protocol, how are frames encrypted?
Using MPPE
If a DirectAccess user has issues with their laptop or remote device, what can be enabled to facilitate help desk personnel get remote desktop access to the client? a. ISATAP b. Teredo c. 6to4 d. IPsec
a. ISATAP
What extension of NAT allows several hundred workstations to access the Internet with a single public Internet address? a. Port Address Translation b. Outside Network Address Translation c. Multiple Address Translation d. Network Address Translation
a. Port Address Translation
A default route is indicated by what address below? a. 255.255.255.255 b. 0.0.0.0 c. 127.0.0.1 d. 192.168.1.255
b. 0.0.0.0
A valid digital certificate that is not self-signed is issued by: a. A DirectAccess client b. A Certification Authority c. A router d. A VPN server
b. A Certification Authority
What authentication method is required for the use of smart cards and can be used for biometric authentication? a. RADIUS authentication b. Extensible authentication protocol c. IKEv2 d. MS-CHAP v2
b. Extensible authentication protocol
What type of tunnel is created between the client computer and a DirectAccess server, and is used for control of the DirectAccess connection? a. Split tunnel b. Infrastructure tunnel c. Internet tunnel d. Intranet tunnel
b. Infrastructure tunnel
What authentication method encrypts both authentication information and data, in addition to being able to prompt a user to change an expired password? a. Encrypted Authentication (CHAP) b. Microsoft Encrypted Authentication Version 2 (MS-CHAP v2) c. IPSec d. Extensible Authentication Protocol (EAP)
b. Microsoft Encrypted Authentication Version 2 (MS-CHAP v2)
What version of the dynamic routing protocol RIP is supported on Windows Server 2016? a. RIPng b. RIPv2 c. RIPv4 d. RIPv1
b. RIPv2
When there are two or more routes to the same destination, the route with what type of metric takes precedence? a. hop count b. lowest c. verified d. highest
b. lowest
What routing protocol must be used to support dynamic routing when using Windows Server 2016 and IPv6 routing? a. RIP b. RIPv2 c. Border Gateway Protocol d. OSPF
c. Border Gateway Protocol
What VPN tunnel type was developed in cooperation with Cisco Systems and Microsoft, and uses Data Encryption Standard (DES) or Triple DES (3DES)? a. L2TP b. PPTP c. L2TP/IPsec d. SSTP
c. L2TP/IPsec
What specific authentication method has no encryption for user credentials or data, and is not recommended for most applications? a. MS-CHAP v2 b. IKEv2 c. PAP d. CHAP
c. PAP
When a router receives packets on an interface, which of the following occurs immediately? a. The router consults its MAC address table to determine where to send the packet b. The router consults its routing table to verify where the packet originated c. The router consults its routing table to determine where to send the packet d. The router consults its routing table to determine if the packet is valid
c. The router consults its routing table to determine where to send the packet
Which service will allow a Windows server to be configured as a router to connect multiple subnets in a network or connect the network to the Internet? a. Certificate Services b. DirectAccess c. RADIUS d. Routing and Remote Access
d. Routing and Remote Access
What port is utilized for an inbound SSTP tunnel? a. TCP 500 b. UDP 1723 c. UDP 4500 c
d. TCP 443
In what order are policies processed in the Network Policy Server? a. Least restrictive policy first b. Bottom to top c. Most restrictive policy first d. Top to bottom
d. Top to bottom
When configuring the Network Access Permissions, what option checks the calling phone number attempting to create a remote connection with the phone number entered into a text box in a user account's properties? a. user access b. Deny access c. Control access list d. Verify Caller-ID
d. Verify Caller-ID
When an internal and an external IP address exist for the same DNS name, how can administrators force DirectAccess clients to a specific IP address?
Use an NRPT exemption
