单项选择题
Your company consists of a single Active Directory domain that is configured in Windows 2000 native mode. All servers run Windows Server 2003 Service Pack 2 （SP2）.
You deploy a Routing and Remote Access server to provide VPN access to the network.You need to ensure that only members of a group named Sales can access the network through the VPN. The solution must minimize the administrative effort required to manage remote access.
What should you do？（）
A.Allow dial-in access for the user accounts of all Sales group members.
B.Deny dial-in access for the user accounts of all users except the Sales group members.
C.Create a remote access policy and assign the Allow - Remote Access permission. Add the Windows-Groups condition and specify the Sales group.
D.Create a remote access policy and assign the Deny - Remote Access permission. Add the Windows-Groups condition and specify all Active Directory groups except for Sales.
相关考题
-
多项选择题
Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack 2 （SP2）. You have a VPN server named Server1. You have an Internet Authentication Service （IAS） server named Server2. You need to ensure that all VPN connections to Server1 are authenticated by Server2. Which two actions should you perform？（）
A.From the Internet Authentication Service snap-in on Server2， create a new RADIUS client.
B.From the Internet Authentication Service snap-in on Server2， create a new remote access policy.
C.From the Routing and Remote Access snap-in， configure Server1 to use RADIUS accounting.
D.From the Routing and Remote Access snap-in， configure Server1 to use RADIUS authentication. -
单项选择题
Your network consists of a single Active Directory domain. The remote access permission for all users is set to Control access through Remote Access Policy.You have a VPN server named Server1 that runs Windows Server 2003 Service Pack 2 （SP2）. The current configuration allows all authenticated users to establish VPN connections to Server1. You create a global group named Group1.You need to prevent all members of Group1 from establishing VPN connections to Server1. What should you do？（）
A.From the local computer policy on Server1， modify the Account Policies settings.
B.From Active Directory Users and Computers， modify the Security settings of Group1.
C.From the Routing and Remote Access snap-in， create a new remote access policy.
D.From the Routing and Remote Access snap-in， open the properties of Server1 and modify the security options. -
单项选择题
You have a server that runs Windows Server 2003 Service Pack 2 （SP2）. Routing and Remote Access is enabled and the server is configured as a remote access server. You need to configure the server to support only the MS-CHAP v2 authentication protocol for remote access authentication. What should you do from the Routing and Remote Access snap-in？（）
A.Configure the port properties.
B.Create and configure a new demand-dial interface.
C.From the server’s properties， modify the security options.
D.From the Connections to Microsoft Routing and Remote Access Server policy， add a new condition.
