You have an Active Directory domain named Contoso.com. The domain contains servers named Server1 and
Server2 that run Windows Server 2016.
You install the Remote Access server role on Server1. You install the Network Policy and Access Services
server role on Server2.
You need to configure Server1 to use Server2 as a RADIUS server.
What should you do?

You have a server named Server1 that runs Windows Server 2016. Server1 is located on the perimeter
network, and only inbound TCP port 443 is allowed to connect Server1 from the Internet.
You install the Remote Access server role on Server1.
You need to configure Server1 to accept VPN connections over port 443.
Which VPN protocol should you use?

Your network contains an Active Directory forest named contoso.com. The forest contains two domains named
contoso.com and litwareinc.com.
Your company recently deployed DirectAccess for the members of a group named DA_Computers. All client
computers are members of DA_Computers.You discover that DirectAccess clients can access the resources located in the contoso.com domain only. The
clients can access the resources in the litwareinc.com domain by using an L2TP VPN connection to the
network.
You need to ensure that the DirectAccess clients can access the resources in the litwareinc.com domain.
What should you do?

Your network contains an Active Directory forest named contoso.com. The functional level of the forest is
Windows Server 2012.
The forest contains five domain controllers and five VPN servers that run Windows Server 2016.
Five hundred users connect to the VPN servers daily.
You need to configure a new server named Server1 as a RADIUS server.
What should you do first?

Your company has 5,000 users who work remotely.
You have 40 VPN servers that host the remote connections for the users.
You plan to deploy a RADIUS solution that contains five RADIUS servers.
You need to ensure that client authentication requests are distributed evenly between the five RADIUS servers.
What should you do?

Your network contains multiple wireless access points (WAPs) that use WPA2-Personal authentication. The
network contains an enterprise root certification authority (CA).
The security administrator at your company plans to implement WPA2-Enterprise authentication on the WAPs.
To support the authentication change, you deploy a server that has Network Policy Server (NPS) installed.
You need to configure NPS to authenticate the wireless clients.
What should you do on the NPS server?

HOTSPOT
You have a network address translation (NAT) server named NAT1 that has an external IP address of
131.107.50.1 and an internal IP address of 10.0.0.1.
You deploy a new server named Web1 that has an IP address of 10.0.0.211.
A remote server named app.fabrikam.com has an IP address of 131.107.1.232.
You need to make Web1 accessible to app.fabrikam.com through NAT1.
What command should you run from NAT1? To answer, select the appropriate options in the answer area.
Hot Area:

Your company has 10 offices. Each office has a local network that contains several Hyper-V hosts that run
Windows Server 2016. All of the offices are connected by high speed, low latency WAN links.
You need to ensure that you can use QoS policies for Live Migration traffic between the offices.
Which component should you install?

You have two Hyper-V hosts named Server1 and Server2 that run Windows Server 2016. Server1 and Server2
are connected to the same network.
On Server1 and Server2, you create an external network switch named Switch1.
You have the virtual machine shown in the following table.

All three virtual machines are connected to Switch1.
You need to prevent applications in VM3 from being able to capture network traffic from VM1 or VM2. The
solution must ensure that VM1 retains network connectivity.What should you do?

You have an Active Directory domain that contains several Hyper-V hosts that run Windows Server 2016.
You plan to deploy network virtualization and to centrally manage Datacenter Firewall policies.
Which component must you install for the planned deployment?