Scenario:
You are a network administrator for a company named Contoso,Ltd. The network is configured as shown in the exhibit.

You install the Remote Access server role on Server2.
Server2 has the following configured.
*Network address translation (NAT)
*The DHCP Server server role
The Security Policy of Contoso states that only TCP ports 80 and 443 are allowed from the internet to server2 You identify the following requirements:
* Add 28 devices to subnet2 for a temporary project.
* Configure Server2 to accept VPN connections from the internet.
* Ensure that devices on Subnet2 obtain TCP/IP settings from DHCP on Server2.
End of Scenario:
You need to identify which subnet mask you must use for subnet2. The solution must minimize the number of available IP addresses on Subnet2.
What subnet mask should you identify? To answer, select the appropriate options in the answer area.

Correct Answer:

Comment: *

Name: *

Email: *

Verification: *

Your network contains an Active Directory domain named contoso.com. The domain contains two servers named Server1 and Server2 that run Windows Server 2016.
Server1 has IP Address Management (IPAM) installed. Server2 has the DHCP Server role installed. The IPAM server retrieves data from Server2.
You create a domain user account named User1.
You need to ensure that User1 can use IPAM to manage DHCP.
Which command should you run on Server1? To answer, select the appropriate options in the answer area.

Correct Answer:

Comment: *

Name: *

Email: *

Verification: *

You have a remote access server named Server1 that runs Windows Server 2016. Server1 has DirectAccess enabled.
You have a proxy server named Server2. All computers on the internal network connect to the Internet by using the proxy.
On Server1, you run the command Set-DAClient -forceTunnel Enabled.
You need to ensure that when a DirectAccess client connects to the network, the client accesses all the Internet resources through the proxy.
What should you run on Server1?

• A.Set-DnsClientNrptGlobal
• B.Set-DnsClientGlobalSetting
• C.Set-DnsClientNrptRule
• D.Set-DAEntryPoint

Comment: *

Name: *

Email: *

Verification: *

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this sections, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You are a network administrator for a company named Contoso, Ltd. The network is configured as shown in the exhibit.

You install the Remote Access server role on Server2. Server2 has the following configured:
* Network address translation (NAT)
* The DHCP Server server role
The Security Policy of Contoso states that only TCP ports 80 and 443 are allowed from the internet to Server2.
You identify the following requirements:
* Add 28 devices to subnet2 for a temporary project.
* Configure Server2 to accept VPN connections from the internet.
* Ensure that devices on Subnet2 obtain TCP/IP settings from DHCP on Server2.
Which VPN protocol should you configure on Server2?

• A.L2TP
• B.IKEv2
• C.PPTP
• D.SSTP

Comment: *

Name: *

Email: *

Verification: *

You have a remote access server named Server1 that runs Windows Server 2016. Server1 has DirectAccess enabled.
A firewall connects Server1 to the Internet.
You need to configure the firewall to ensure that DirectAccess clients can connect to Server1 by using Teredo, 6to4, and IP-HTTPS.
Which inbound port should be open on the firewall for each transition technology?
To answer, drag the appropriate ports and protocols to the correct transition technologies. Each port and protocol may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.

Correct Answer:

Comment: *

Name: *

Email: *

Verification: *