70-413 Exam Network Access Services 2

Question 1

What is the primary purpose of the Network Location Server (NLS) in a DirectAccess deployment?

Accepted Answer

To allow DirectAccess clients to detect whether they are on the internal or external network

Answer

To authenticate DirectAccess clients using digital certificates

Answer

To assign IPv6 addresses to DirectAccess clients on the corporate network

Answer

To distribute CRL information to DirectAccess clients

Question 2

How are DirectAccess client configuration settings deployed to Windows client computers in an enterprise environment?

Accepted Answer

Via a DirectAccess Client Settings Group Policy Object linked to the client OU

Answer

Via the Remote Access Server Settings GPO applied at the domain root

Answer

Via a Network Policy Settings GPO configured on NPS

Answer

Via manual registry edits pushed through a login script

Question 3

Which Windows Server role must be installed on the server designated as a DirectAccess gateway?

Accepted Answer

Remote Access

Answer

Network Policy and Access Services

Answer

Active Directory Certificate Services

Answer

Web Services (IIS)

Question 4

When DirectAccess clients behind NAT devices cannot use Teredo because UDP port 3544 is blocked, what automatic fallback mechanism ensures connectivity?

Accepted Answer

The client automatically falls back to IP-HTTPS for connectivity

Answer

A Teredo relay server is deployed on the internal network to assist

Answer

The client switches to 6to4 tunneling as an alternative

Answer

ISATAP is configured as a secondary tunneling mechanism

Question 5

Which PKI requirement must be satisfied before deploying DirectAccess with IPsec in an enterprise environment?

Accepted Answer

Computer certificates issued by an internal CA deployed to both the DA server and all DA clients

Answer

Self-signed certificates installed only on the DirectAccess server

Answer

User certificates obtained from a trusted public certificate authority

Answer

Wildcard certificates covering the entire internal DNS namespace

Question 6

What is the function of the Name Resolution Policy Table (NRPT) in a DirectAccess deployment?

Accepted Answer

To direct DNS queries for internal namespaces to internal DNS servers while using public DNS for external names

Answer

To block all external DNS lookups while connected via DirectAccess

Answer

To cache DNS responses on the DirectAccess server to reduce query latency

Answer

To authenticate DNS queries using DNSSEC for internal zones

Question 7

Which Windows client operating system editions support DirectAccess in a Windows Server 2012 R2 environment?

Accepted Answer

Windows 7 Enterprise or Ultimate and later Enterprise/Education editions

Answer

Windows XP SP3 Enterprise and Windows Vista Business

Answer

Windows Vista Enterprise and Ultimate editions only

Answer

Windows 8 Pro and Windows 10 Pro or higher