Your network contains an Active Directory domain named contoso.com. The domain contains a Web
server named www.contoso.com. The Web server is available on the Internet.

You implement DirectAccess by using the default configuration.
You need to ensure that users never attempt to connect to www.contoso.com by using DirectAccess.
The solution must not prevent the users from using DirectAccess to access other resources in
contoso.com.
Which settings should you configure in a Group Policy object (GPO)?

A.
DirectAccess Client Experience Settings

B.
DNS Client

C.
Name Resolution Policy

D.
Network Connections

Explanation:
For DirectAccess, the NRPT must be configured with the namespaces of your intranet with a leading
dot (for example, internal.contoso.com or . corp.contoso.com). For a DirectAccess client, any name
request that matches one of these namespaces will be sent to the specified intranet Domain Name
System (DNS) servers.
Include all intranet DNS namespaces that you want DirectAccess client computers to access.
There are no command line methods for configuring NRPT rules. You must use Group Policy settings.
To configure the NRPT through Group Policy, use the Group Policy add-in at Computer Configuration
\Policies\Windows Settings\Name Resolution Policy in the Group Policy object for DirectAccess
clients. You can create a new NRPT rule and edit or delete existing rules. For more information, see
Configure the NRPT with Group Policy.