单项选择题
A.Allow dial-in access for the user accounts of all Sales group members.
B.Deny dial-in access for the user accounts of all users except the Sales group members.
C.Create a remote access policy and assign the Allow - Remote Access permission. Add the Windows-Groups condition and specify the Sales group.
D.Create a remote access policy and assign the Deny - Remote Access permission. Add the Windows-Groups condition and specify all Active Directory groups except for Sales.
多项选择题 Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack 2 （SP2）. You have a VPN server named Server1. You have an Internet Authentication Service （IAS） server named Server2. You need to ensure that all VPN connections to Server1 are authenticated by Server2. Which two actions should you perform？（）
单项选择题 Your network consists of a single Active Directory domain. The remote access permission for all users is set to Control access through Remote Access Policy.You have a VPN server named Server1 that runs Windows Server 2003 Service Pack 2 （SP2）. The current configuration allows all authenticated users to establish VPN connections to Server1. You create a global group named Group1.You need to prevent all members of Group1 from establishing VPN connections to Server1. What should you do？（）
单项选择题 You have a server that runs Windows Server 2003 Service Pack 2 （SP2）. Routing and Remote Access is enabled and the server is configured as a remote access server. You need to configure the server to support only the MS-CHAP v2 authentication protocol for remote access authentication. What should you do from the Routing and Remote Access snap-in？（）