Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

Book 2 > Chapter 4 > Flashcards

Chapter 4 Flashcards

1
Q

What is maintained by a NAT device to record which internal client traffic must be routed outside?

A

A mapping table

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What must be installed to provide Windows Server with NAT server capability?

A

The Remote Access server role

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

How do you set up NAT on Windows Server?

A

Server Manager > Tools > Routing and Remote Access > Right-click server > Configure and Enable Routing and Remote Access > from the Route and Remote Access Server Setup Wizard, choose NAT > select the public and private interfaces

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What is a recommended step that makes NAT configuration easier?

A

Name your network connections so they are easily identifiable, by right-clicking Start and selecting Network Connections

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Where can you configure NAT settings?

A

The Routing and Remote Access console

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

How can you configure NAT to allow certain private clients to use public addresses?

A

Reserve public addresses

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What two additional network services can be enabled from within NAT?

A

DHCP and DNS resolution

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Where can you monitor NAT’s DHCP service?

A

In the Routing and Remote Access console, right-click the NAT node, and select Show DHCP Allocator Information

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Where can you monitor NAT’s DNS service?

A

In the Routing and Remote Access console, right-click the NAT node, and select Show DNS Proxy Information

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What are two remote access scenarios where VPN is used?

A

Remote access by allowing remote users to connect to a site

Site-to-site (S2S) allowing for connections between remote sites

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What are three common characteristics of VPNs?

A

Authentication between client and server, encryption of data, and encapsulation through tunneling

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What are the four VPN protocols available in Windows Server?

A

Point-to-Point Tunneling Protocol (PPTP)
Layer 2 Tunneling Protocol with Internet Protocol Security (L2TP/IPsec)
Secure Socket Tunneling Protocol (SSTP)
Internet Key Exchange Version 2 (IKEv2)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Which VPN protocol is widely supported, but is considered to be less secure than its alternatives?

A

PPTP

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What authentication methods are available for PPTP?

A

Microsoft Challenge Handshake Authentication Protocol version 2 (MS-CHAPv2)
Extensible Authentication Protocol-Transport Layer Security (EAP-TLS)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What protocols does L2TP use?

A

It combines PPTP and Layer 2 Forwarding L2F, but unlike PPTP, uses IPsec for encryption

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Which protocol is based on HTTPS, and what is its key advantage?

A

SSTP, uses port 443 which is usually open in most firewalls

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Which protocol is particularly useful for mobile devices and why?

A

IKEv2, the only protocol that supports VPN reconnect

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What port is used by PPTP?

A

TCP 1723

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

What ports are used by L2TP?

A

UDP 500, 1701, and 4500

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

What port is used by SSTP?

A

TCP 443, also used by HTTPS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

What port is used by IKEv2?

A

UDP 500

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

What VPN authentication methods are supported by Windows Server 2016?

A

PAP, CHAP, MS-CHAPv2, and EAP

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

Which VPN authentication protocol uses insecure plaintext authentication?

A

PAP

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

Which VPN authentication protocol uses challenge/response and stores passwords with reversible encryption?

A

CHAP

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

Which VPN authentication protocol uses challenge/response, but has better security than some others?

A

MS-CHAPv2

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

Which VPN authentication protocol is the most secure and supports multiple authentication methods?

A

EAP

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

What role service is required to deploy the RAS Gateway in Windows Server?

A

DirectAccess and VPN (RAS) role service

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

What scenarios are supported by RAS Gateway?

A 
Multitenant-aware VPN gateway
Multitenant-aware NAT gateway
Forwarding gateway
DirectAccess server
GRE tunneling
Dynamic routing with BGP
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

What type of RAS Gateway deployment allows for virtual machines on virtual networks to access the Internet?

A

Multitenant-aware NAT gateway

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

What type of RAS Gateway deployment enables access to server resources on physical networks from virtual networks?

A

Forwarding gateway for internal physical network access

31
Q

What type of RAS Gateway deployment allows remote users to access network infrastructure without a VPN?

A

DirectAccess server

32
Q

What type of RAS Gateway deployment enables connectivity between tenant virtual networks and external networks?

A

GRE tunneling

33
Q

What type of RAS Gateway deployment is a dynamic routing protocol that can traverse S2S VPNs, useful on enterprise and cloud networks?

A

Dynamic routing with BGP

34
Q

What is required to implement remote access VPN?

A 
Two network interfaces
DHCP distribution (either by reserving DHCP server addresses or distributing directly through VPN)
Set up the VPN server as a RADIUS client
35
Q

What is required to use VPN reconnect?

A

VPN server running Server 2008 R2 minimum
Client PC running Windows 7 minimum
Organization PKI to deploy computer certificates
IKEv2 VPN

36
Q

Which PowerShell cmdlet is used to configure app-triggered VPNs?

A

Add-VpnConnectionTriggerApplication

37
Q

What kind of PCs do not support app-triggered VPNs?

A

Domain-bound PCs

38
Q

What options are available with VPN profiles?

A

Always On - VPN initiates when users signs in or network change
App-Triggered VPN
Traffic Filters - VPN initates based on policies, e.g. apps, protocols, addresses
LockDown VPN - Secures device so only VPN can be used

39
Q

What tools can be used to create and distribute VPN profiles?

A

Connection Manager Administration Kid (CMAK)
Microsoft Intune
Configuration Manager

40
Q

What must be created at the originating routers of an S2S VPN?

A

A demand-dial interface

41
Q

In what version of Windows Server was DirectAccess first introduced?

A

Server 2008 R2

42
Q

What is the minimum client requirement for using DirectAccess?

A

Windows 7

43
Q

What IP technology is used in DirectAccess connections?

A

IPv6 and IPsec

44
Q

How do clients determine their network location?

A

By checking if the network location server (NLS) is available, in which case they do not need DirectAccess

45
Q

What is used by DirectAccess clients to determine which DNS servers they should use?

A

Name Resolution Policy Table (NRPT)

46
Q

What kind of IPv6 compatibility options are offered by DirectAccess?

A

ISATAP - Connect to DirectAccess over IPv4 for intranet
6to4 - Connect to DirectAccess over IPv4 Internet
Teredo - Connect to DirectAccess over IPv4 through NAT
IP-HTTPS - Connect to DirectAccess when other methods are unavailable

47
Q

On what kind of server can DirectAccess not be installed?

A

A domain controller

48
Q

What is required a client to automatically select a DirectAccess server?

A

Windows 8

49
Q

How can you provision DirectAccess to new clients that are not on the network?

A

Use djoin with an AD DS Binary Large Object (BLOB)

50
Q

What are the server requirements for DirectAccess?

A

Domain member, but not controller
At least one internal network adapter
For edge topology, one public IPv4 address for any Internet network adapter
Windows Firewall enabled on all profiles
DirectAccess and VPN (RAS) role service installed

51
Q

What role provides the DirectAccess and VPN (RAS) role service?

A

Remote Access server role

52
Q

What DirectAccess setup method is not suitable for deployments support Windows 7 clients?

A

The wizard-based setup

53
Q

How can you apply DirectAccess to specific computers?

A

Create an AD group and add use that group in the DirectAccess Client Setup

54
Q

What DNS records are created by the DirectAccess Getting Started Wizard?

A

directaccess-corpConnectivityHost
DirectAccess-NLS
directaccess-WebProbeHost

55
Q

What GPOs are created by the DirectAccess Getting Started Wizard?

A

DirectAccess Client Settings

DirectAccess Server Settings

56
Q

How can you tell if DirectAccess settings are applied to a client?

A

Run gpresult /r and see if the DirectAccess Client Settings GPO appears

57
Q

What are some ways to troubleshoot DirectAccess issues on a client?

A

Verify the GPO is applied
Verify the client has an IPv6 address starting with 2002
See if the DirectAccess connection is active in Settings > Network & Internet > DirectAccess
Use “netsh show effectivepolicy” to see if the DirectAccess policy is applied

58
Q

Which Windows Server role provides policy-based management of remote access?

A

NPS

59
Q

How can the NPS role be installed using PowerShell?

A

Install-WindowsFeature -Name npas -IncludeManagementTools

60
Q

What is Microsoft’s implementation of a RADIUS server?

A

NPS

61
Q

Which PowerShell cmdlet is used to add RADIUS clients to NPS?

A

New-NpsRadiusClient

62
Q

What type of server can forward certain requests to a central RADIUS server?

A

RADIUS proxy

63
Q

What can you use to predefine RADIUS server and client settings?

A

NPS templates

64
Q

What values are used to load balance RADIUS servers?

A

Priority and weight

65
Q

What are RADIUS clients?

A

Devices or serves that service remote client connection attempts, NOT the client devices that connect to wireless or VPN resources

66
Q

What are the default ports for RADIUS authentication and accounting?

A

1812 and 1813

67
Q

What types of NPS templates can be created?

A

Shared secrets
RADIUS clients
Remote RADIUS servers
IP filters

68
Q

What two types of policies are supported by NPS?

A

Network policies - Control whether a remote client’s connection attempt is successful
Connection request policies - Determine whether the local vs. remote server processes client connection attempts

69
Q

How are multiple NPS policies handled?

A

The first one that meets the policy conditions is the one applied, but if a client does not meet policy constraints, it is rejected without processing further policies

70
Q

How can a user accounts dial-in permissions be set?

A

In AD, they can be defined to allow access, deny access, or control access through NPS policy
Note that allow access permits access even if no NPS policy is defined

71
Q

What two network policies are created by default when you install NPS, and what are their permissions?

A

Connections to Microsoft Routing and Remote Access server
Connections to other access servers
Both are set to deny access by default

72
Q

Which PowerShell cmdlets are used to export and import NPS configurations?

A

Export-NpsConfiguration and Import-NpsConfiguration

73
Q

What certificate purposes are deployed by default from certificates generated by AD Certificate Services?

A

Both client authentication and server authentication

Book 2 (4 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions