Exam 70-413 topic 1 question 85 discussion

Actual exam question from Microsoft's 70-413

Question #: 85
Topic #: 1

Your company has a main office.
The network contains an Active Directory domain named contoso.com. The main office contains a server named Server1 that runs Windows Server 2012 R2.
Server1 has the Remote Access server role installed and is configured to accept incoming SSTP-based VPN connections.
All client computers run Windows 10.
The company plans to open a temporary office that will contain a server named Server2 that runs Windows Server 2012 R2 and has the DHCP Server server role installed. The office will also have 50 client computers and an Internet connection.
You need to recommend a solution to provide the users in the temporary office with access to the resources in the main office.
What should you recommend?
More than one answer choice may achieve the goal. Select the BEST answer.

A. Use the Connection Manager Administration Kit (CMAK) to create a connection package that specifies Server1 as the target for SSTP-based VPN connections. Manually distribute the CMAK package to each client computer in the temporary office.
B. Install the Remote Access server role on Server2. From Routing and Remote Access on Server2, add a SSTP-based VPN port. From DHCP on Server2, configure the default gateway server option.
C. Use the Connection Manager Administration Kit (CMAK) to create a connection package that specifies Server1 as the target for SSTP-based VPN connections. Use a Group Policy object (GPO) to distribute the CMAK package to each client computer in the temporary office.
D. Install the Remote Access server role on Server2. From Routing and Remote Access on Server2, configure a demand-dial interface. From DHCP on Server2, configure the default gateway server option.

Show Suggested Answer

Suggested Answer: A 🗳️
CMAK is used for simplifying the deployment of VPN client-connection setup. With CMAK we create the VPN profile in executable file format, and then distribute it to the clients.
Note: Connection Manager is a client network connection tool that allows a user to connect to a remote network, such as an Internet service provider (ISP), or a corporate network protected by a virtual private network (VPN) server.
Incorrect:
SSTP is not used for site-to-site connections.
The remote temporary office is not connected to the domain yet, so distribution through a GPO would not work.
As Server1 is configured with SSTP remote dialing cannot be right.
Reference:
Connection Manager Administration Kit
https://technet.microsoft.com/en-us/library/cc752995.aspx

by spam at Feb. 14, 2020, 11:55 a.m.

Comments

Submit Cancel

brunosilvam

5 years ago

A. Use the Connection Manager Administration Kit (CMAK) to create a connection package that specifies Server1 as the target for SSTP-based VPN connections. Manually distribute the CMAK package to each client computer in the temporary office.

upvoted 4 times

...

spam

5 years, 2 months ago

In that case my answer is A. Server1 [in the main office] already has Remote Access installed and is fully configured to accept the incoming SSTP-based VPN connections. Need to provide users with access to the resources [file servers] in the MAIN! office [not in the temporary office where only Server2 is, temporary office does not seem to have any file servers not even RODC, why establish a connectivity to it?]. Temporary office is like home. All you have is a DHCP given IP address and the Internet connection. So, I would create a CMAK package and publish it on the company’s website. Can’t use the GPO to distribute it, because the client computers/laptops are not connected to any DC/domain/main office yet. Or put the CMAC package on a USB stick and execute it on every computer in the temporary office. My answer is A.

upvoted 4 times

...

Exam 70-413 All Questions

View all questions & answers for the 70-413 exam

Exam 70-413 topic 1 question 85 discussion

Comments

brunosilvam

spam

SY0-701