Information Technology Reference
In-Depth Information
3.
You use DirectAccess for all Windows 8 and later remote clients, but you use VPN to
support Windows 7 clients. You need to configure VPN to use IP addresses controlled
by the Remote Access server. What settings do you need to make? (Choose all that
apply.)
In the Routing And Remote Access console, select Assign Addresses Automatically.
A.
In the Routing And Remote Access console, select Assign Addresses From A
Static Pool.
B.
In the DHCP Management console, create DHCP reservations for the IP addresses
assigned to VPN clients.
C.
In the DHCP Management console, create a DHCP exclusion for the IP addresses
assigned to VPN clients.
D.
In the Remote Access Management console, select Assign Addresses Automatically.
E.
In the Remote Access Management console, select Assign Addresses From A Static
Address Pool.
F.
Originally introduced in Windows Server 2008 R2 and Windows 7, DirectAccess is an
always-on technology that allows remote management of domain-joined computers and
optionally a transparent, always available, remote connection to the domain network that
provides users remote access without having to initiate a VPN connection.
A DirectAccess remote connection has the following benefits as compared with VPNs:
■
Always-on
With a VPN, a user needs to initiate a connection before the computer is
connected. With DirectAccess, the computer is connected to the domain network as
soon as it has an Internet connection.
■
Seamless
A DirectAccess connected computer is transparently connected to the
domain network. The computer seems to users as if they are directly connected to the
domain network, with the exception of the connection speed, which is dependent on
the Internet connection speed.
■
Security
A VPN connection is an unmanaged connection with Group Policy not
enforced. A DirectAccess connection is a fully managed connection with all Group
Policy Objects enforced; and management tools, such as Microsoft System Center
Configuration Manager, can manage the client computer just as they do when it is
connected locally. DirectAccess uses IPSec to authenticate the user and computer, and
to encrypt communication.
