Brainscape's Knowledge GenomeTM


Top Flashcards (Certified)
All Flashcards

Book 2 > Chapter 4 > Flashcards

Chapter 4 Flashcards

(73 cards)

Start Studying
1
Q

What is maintained by a NAT device to record which internal client traffic must be routed outside?

A

A mapping table

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What must be installed to provide Windows Server with NAT server capability?

A

The Remote Access server role

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

How do you set up NAT on Windows Server?

A

Server Manager > Tools > Routing and Remote Access > Right-click server > Configure and Enable Routing and Remote Access > from the Route and Remote Access Server Setup Wizard, choose NAT > select the public and private interfaces

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What is a recommended step that makes NAT configuration easier?

A

Name your network connections so they are easily identifiable, by right-clicking Start and selecting Network Connections

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Where can you configure NAT settings?

A

The Routing and Remote Access console

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

How can you configure NAT to allow certain private clients to use public addresses?

A

Reserve public addresses

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What two additional network services can be enabled from within NAT?

A

DHCP and DNS resolution

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Where can you monitor NAT’s DHCP service?

A

In the Routing and Remote Access console, right-click the NAT node, and select Show DHCP Allocator Information

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Where can you monitor NAT’s DNS service?

A

In the Routing and Remote Access console, right-click the NAT node, and select Show DNS Proxy Information

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What are two remote access scenarios where VPN is used?

A

Remote access by allowing remote users to connect to a site

Site-to-site (S2S) allowing for connections between remote sites

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What are three common characteristics of VPNs?

A

Authentication between client and server, encryption of data, and encapsulation through tunneling

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What are the four VPN protocols available in Windows Server?

A

Point-to-Point Tunneling Protocol (PPTP)
Layer 2 Tunneling Protocol with Internet Protocol Security (L2TP/IPsec)
Secure Socket Tunneling Protocol (SSTP)
Internet Key Exchange Version 2 (IKEv2)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Which VPN protocol is widely supported, but is considered to be less secure than its alternatives?

A

PPTP

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What authentication methods are available for PPTP?

A

Microsoft Challenge Handshake Authentication Protocol version 2 (MS-CHAPv2)
Extensible Authentication Protocol-Transport Layer Security (EAP-TLS)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What protocols does L2TP use?

A

It combines PPTP and Layer 2 Forwarding L2F, but unlike PPTP, uses IPsec for encryption

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Which protocol is based on HTTPS, and what is its key advantage?

A

SSTP, uses port 443 which is usually open in most firewalls

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Which protocol is particularly useful for mobile devices and why?

A

IKEv2, the only protocol that supports VPN reconnect

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What port is used by PPTP?

A

TCP 1723

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

What ports are used by L2TP?

A

UDP 500, 1701, and 4500

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

What port is used by SSTP?

A

TCP 443, also used by HTTPS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

What port is used by IKEv2?

A

UDP 500

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

What VPN authentication methods are supported by Windows Server 2016?

A

PAP, CHAP, MS-CHAPv2, and EAP

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

Which VPN authentication protocol uses insecure plaintext authentication?

A

PAP

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

Which VPN authentication protocol uses challenge/response and stores passwords with reversible encryption?

A

CHAP

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Which VPN authentication protocol uses challenge/response, but has better security than some others?
MS-CHAPv2
26
Which VPN authentication protocol is the most secure and supports multiple authentication methods?
EAP
27
What role service is required to deploy the RAS Gateway in Windows Server?
DirectAccess and VPN (RAS) role service
28
What scenarios are supported by RAS Gateway?
``` Multitenant-aware VPN gateway Multitenant-aware NAT gateway Forwarding gateway DirectAccess server GRE tunneling Dynamic routing with BGP ```
29
What type of RAS Gateway deployment allows for virtual machines on virtual networks to access the Internet?
Multitenant-aware NAT gateway
30
What type of RAS Gateway deployment enables access to server resources on physical networks from virtual networks?
Forwarding gateway for internal physical network access
31
What type of RAS Gateway deployment allows remote users to access network infrastructure without a VPN?
DirectAccess server
32
What type of RAS Gateway deployment enables connectivity between tenant virtual networks and external networks?
GRE tunneling
33
What type of RAS Gateway deployment is a dynamic routing protocol that can traverse S2S VPNs, useful on enterprise and cloud networks?
Dynamic routing with BGP
34
What is required to implement remote access VPN?
``` Two network interfaces DHCP distribution (either by reserving DHCP server addresses or distributing directly through VPN) Set up the VPN server as a RADIUS client ```
35
What is required to use VPN reconnect?
VPN server running Server 2008 R2 minimum Client PC running Windows 7 minimum Organization PKI to deploy computer certificates IKEv2 VPN
36
Which PowerShell cmdlet is used to configure app-triggered VPNs?
Add-VpnConnectionTriggerApplication
37
What kind of PCs do not support app-triggered VPNs?
Domain-bound PCs
38
What options are available with VPN profiles?
Always On - VPN initiates when users signs in or network change App-Triggered VPN Traffic Filters - VPN initates based on policies, e.g. apps, protocols, addresses LockDown VPN - Secures device so only VPN can be used
39
What tools can be used to create and distribute VPN profiles?
Connection Manager Administration Kid (CMAK) Microsoft Intune Configuration Manager
40
What must be created at the originating routers of an S2S VPN?
A demand-dial interface
41
In what version of Windows Server was DirectAccess first introduced?
Server 2008 R2
42
What is the minimum client requirement for using DirectAccess?
Windows 7
43
What IP technology is used in DirectAccess connections?
IPv6 and IPsec
44
How do clients determine their network location?
By checking if the network location server (NLS) is available, in which case they do not need DirectAccess
45
What is used by DirectAccess clients to determine which DNS servers they should use?
Name Resolution Policy Table (NRPT)
46
What kind of IPv6 compatibility options are offered by DirectAccess?
ISATAP - Connect to DirectAccess over IPv4 for intranet 6to4 - Connect to DirectAccess over IPv4 Internet Teredo - Connect to DirectAccess over IPv4 through NAT IP-HTTPS - Connect to DirectAccess when other methods are unavailable
47
On what kind of server can DirectAccess not be installed?
A domain controller
48
What is required a client to automatically select a DirectAccess server?
Windows 8
49
How can you provision DirectAccess to new clients that are not on the network?
Use djoin with an AD DS Binary Large Object (BLOB)
50
What are the server requirements for DirectAccess?
Domain member, but not controller At least one internal network adapter For edge topology, one public IPv4 address for any Internet network adapter Windows Firewall enabled on all profiles DirectAccess and VPN (RAS) role service installed
51
What role provides the DirectAccess and VPN (RAS) role service?
Remote Access server role
52
What DirectAccess setup method is not suitable for deployments support Windows 7 clients?
The wizard-based setup
53
How can you apply DirectAccess to specific computers?
Create an AD group and add use that group in the DirectAccess Client Setup
54
What DNS records are created by the DirectAccess Getting Started Wizard?
directaccess-corpConnectivityHost DirectAccess-NLS directaccess-WebProbeHost
55
What GPOs are created by the DirectAccess Getting Started Wizard?
DirectAccess Client Settings | DirectAccess Server Settings
56
How can you tell if DirectAccess settings are applied to a client?
Run gpresult /r and see if the DirectAccess Client Settings GPO appears
57
What are some ways to troubleshoot DirectAccess issues on a client?
Verify the GPO is applied Verify the client has an IPv6 address starting with 2002 See if the DirectAccess connection is active in Settings > Network & Internet > DirectAccess Use "netsh show effectivepolicy" to see if the DirectAccess policy is applied
58
Which Windows Server role provides policy-based management of remote access?
NPS
59
How can the NPS role be installed using PowerShell?
Install-WindowsFeature -Name npas -IncludeManagementTools
60
What is Microsoft's implementation of a RADIUS server?
NPS
61
Which PowerShell cmdlet is used to add RADIUS clients to NPS?
New-NpsRadiusClient
62
What type of server can forward certain requests to a central RADIUS server?
RADIUS proxy
63
What can you use to predefine RADIUS server and client settings?
NPS templates
64
What values are used to load balance RADIUS servers?
Priority and weight
65
What are RADIUS clients?
Devices or serves that service remote client connection attempts, NOT the client devices that connect to wireless or VPN resources
66
What are the default ports for RADIUS authentication and accounting?
1812 and 1813
67
What types of NPS templates can be created?
Shared secrets RADIUS clients Remote RADIUS servers IP filters
68
What two types of policies are supported by NPS?
Network policies - Control whether a remote client's connection attempt is successful Connection request policies - Determine whether the local vs. remote server processes client connection attempts
69
How are multiple NPS policies handled?
The first one that meets the policy conditions is the one applied, but if a client does not meet policy constraints, it is rejected without processing further policies
70
How can a user accounts dial-in permissions be set?
In AD, they can be defined to allow access, deny access, or control access through NPS policy Note that allow access permits access even if no NPS policy is defined
71
What two network policies are created by default when you install NPS, and what are their permissions?
Connections to Microsoft Routing and Remote Access server Connections to other access servers Both are set to deny access by default
72
Which PowerShell cmdlets are used to export and import NPS configurations?
Export-NpsConfiguration and Import-NpsConfiguration
73
What certificate purposes are deployed by default from certificates generated by AD Certificate Services?
Both client authentication and server authentication

Book 2 (4 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2025 Bold Learning Solutions. Terms and Conditions