Your network contains an Active Directory domain named contoso.com. The domain
contains a Web server named www.contoso.com. The Web server is available on the
Internet.
You implement DirectAccess by using the default configuration.
You need to ensure that users never attempt to connect to www.contoso.com by using
DirectAccess. The solution must not prevent the users from using DirectAccess to access
other resources in contoso.com.
Which settings should you configure in a Group Policy object (GPO)?

A.
DirectAccess Client Experience Settings

B.
DNS Client

C.
Name Resolution Policy

D.
Network Connections

Explanation:
For DirectAccess, the NRPT must be configured with the namespaces of your intranet with a
leading dot (for example, . internal.contoso.com or . corp.contoso.com). For a DirectAccess
client, any name request that matches one of these namespaces will be sent to the specified
intranet Domain Name System (DNS) servers.
Include all intranet DNS namespaces that you want DirectAccess client computers to
access.
There are no command line methods for configuring NRPT rules. You must use Group
Policy settings. To configure the NRPT through Group Policy, use the Group Policy add-in at
Computer Configuration \Policies\Windows Settings\Name Resolution Policy in the Group
Policy object for DirectAccess clients. You can create a new NRPT rule and edit or delete
existing rules. For more information, see Configure the NRPT with Group Policy.