Implement Network Connectivity and Remote Access Solutions

Question 1

Which tunneling protocol introduced in Server 2016 can encapsulate a wide variety of network layer protocols inside a point-to-point links over an IP internetwor?

Answer 1

Generic Routing Encapsulation (GRE)

Question 2

Which 3 role services are included in the Server 2016 Remote Access server role?

Answer 2

Direct Access and VPN, Routing and Web Application Proxy.

Question 3

Which cmdlet would yo use to configure a NAT network named MyNATNetwork that is connected to the internal sub net of 192.168.100.0/24

Answer 3

New-NetNat -Name MyNATNetwork -InternalIPInterfaceAddress 192.168.100.0/24

Question 4

What cmdlet would remove the Domain Computers security group in the nutex.com domain from being DirectAccess clients?

Answer 4

Remove-DAClient -SecurotyGroupNameList @(‘nutex.com\DirectAccessClients’)

Question 5

How should you configure a NPS server in order to route RADIUS messages between RADIUS clients and RADIUS servers that perform user authentication, authorization and accounting?

Answer 5

As a RADIUS proxy.

Question 6

What feature is not enabled by default when you create a new VPN in Windows, forcing all network traffic to be routed through the VPN when connected?

Answer 6

Split tunnelling

Question 7

Which cmdlet would you use to create an internal switch named “NAT_MySwitch”

Answer 7

New-VMSwitch -Name “NAT_MySwitch” -SwitchType Internal

Question 8

Which routing protocol in Server 2016 reduces the need for manual route configuration on routers because it is a dynamic routing protocol, and automatically learns routes between sites that are connected by using site-to site VPN connections?

Answer 8

Border Gateway Protocol (BGP)

Question 9

What cmdlet adds a new external RADIUS server?

Answer 9

Add-RemoteAccessRadius

Question 10

Which editions of Windows 10 support Direct Access?

Answer 10

Enterprise, Education and Enterprise 2015 (LTSB)

Question 11

You have a customer with a branch office that has about twenty staff, each with a
personal computer running Windows 10. The branch office has a single Windows
Server 2016 computer that provides basic network services. How would you configure
Internet network connectivity for this branch office using the server? What are the
requirements of your solution?

Answer 11

You can install NAT by adding the Routing role service on the server. This requires two
network adapters in the server, one connected to the private network and one to the
Internet. You could configure the NAT service so that it provided DHCP and DNS name
resolution for internal clients.

Question 12

How will you configure clients at this customer site with the correct IP address settings
so that they can connect to the Internet?

Answer 12

After installing NAT, if you opt to use the DHCP allocator in NAT, there is nothing
further to do, because the clients are configured to use the NAT server as their default
gateway. However, if you opted to manually configure networked clients, you must
manually assign the private IPv4 address of the NAT server as the default gateway for
all clients on the private network.

Question 13

Your customer wants to make a web server available to users on the Internet. How
could you make this configuration change?

Answer 13

You can modify the configuration of the NAT server so that it published the HTTP
port. To complete this task, you must know the private IPv4 address of the server on
the internal network. You can then use the Services and Ports page of the Internet
interface of the NAT server to define the location of the internal web server.

Question 14

You have been tasked with planning a DirectAccess deployment for A Datum. Only
users in the Sales department will be using DirectAccess. Using the Getting Started
Wizard, how could you configure this?

Answer 14

You can create a global security group called Sales_Computers. Next, you can add
the computers for all sales users to that group. Next, in the Getting Started wizard, you
can modify the Remote Clients settings to use only the newly-created group.

Question 15

After applying your strategy to the above requirement, you find that not all sales
computers are able to access internal resources when connected externally. What
should you do?

Answer 15

Use standard network troubleshooting techniques to determine whether those com-
puters are obtaining an appropriate IPv6 address. Next, verify correct application of
the DirectAccess Client Settings GPO by using the gpresult command. Finally, run the
Netsh name show effectivepolicy command to verify whether DirectAccess settings are
being applied.

Question 16

You are responsible for planning a remote access solution for A. Datum’s sales team.
The remote users will connect using VPNs. You know that at certain times of the day,
many users will attempt to connect to resources at the head office. You decide to
implement multiple NPS servers to help distribute the load of these connection at-
tempts. How might you achieve this?

Answer 16

To achieve load balancing for remote access connection attempts by using NPS, you
must deploy multiple NPS computers. Configure connection request policies on some
of these NPS computers such that remote RADIUS servers are used to perform authen-
tication for remote connection attempts. This creates a deployment scenario based on
RADIUS servers and RADIUS proxies.

Question 17

You find yourself frequently configuring the same RADIUS clients for your RADIUS
proxies. How could you more quickly configure these RADIUS clients on your RADIUS
proxies?

Answer 17

You can create a number of RADIUS client templates and use these on the RADIUS
proxies when adding a RADIUS client.

Question 18

What are IP Filters templates used for in NPS?

Answer 18

You use IP Filters templates in NPS to define the characteristics of network traffic in
terms of protocol and port, and whether that traffic is allowed or blocked. After you
define these templates, you can use them in network policies to control the type of
traffic permitted by selecting the appropriate IP Filters template on the Configure Set-
tings page in the New Policy Wizard.