Your network contains two Active Directory forests named contoso.com and adatum.com. The
contoso.com forest contains a server named Server1.contoso.com. The adatum.com forest contains
a server named server2. adatum.com. Both servers have the Network Policy Server role service
installed.
The network contains a server named Server3. Server3 is located in the perimeter network and has
the Network Policy Server role service installed.
You plan to configure Server3 as an authentication provider for several VPN servers.
You need to ensure that RADIUS requests received by Server3 for a specific VPN server are always
forwarded to Server1.contoso.com.
Which two should you configure on Server3? (Each correct answer presents part of the solution.
Choose two.)

A.
Remediation server groups

B.
Remote RADIUS server groups

C.
Connection request policies

D.
Network policies

E.
Connection authorization policies

Explanation:
To configure NPS as a RADIUS proxy, you must create a connection request policy that contains all of
the information required for NPS to evaluate which messages to forward and where to send the
messages.
When you configure Network Policy Server (NPS) as a Remote Authentication Dial-In User Service
(RADIUS) proxy, you use NPS to forward connection requests to RADIUS servers that are capable of
processing the connection requests because they can perform authentication and authorization in
the domain where the user or computer account is located. For example, if you want to forward
connection requests to one or more RADIUS servers in untrusted domains, you can configure NPS as

a RADIUS proxy to forward the requests to the remote RADIUS servers in the untrusted domain. To
configure NPS as a RADIUS proxy, you must create a connection request policy that contains all of
the information required for NPS to evaluate which messages to forward and where to send the
messages.
When you configure a remote RADIUS server group in NPS and you configure a connection request
policy with the group, you are designating the location where NPS is to forward connection requests.

httpHYPERLINK “http://technet.microsoft.com/en-us/library/cc754518.aspx#_blank”:
//technetHYPERLINK “http://technet.microsoft.com/en-us/library/cc754518.aspx#_blank”.
microsoftHYPERLINK “http://technet.microsoft.com/en-us/library/cc754518.aspx#_blank”. com/enus/library/cc754518HYPERLINK “http://technet.microsoft.com/enus/library/cc754518.aspx#_blank”. aspx
htHYPERLINK “http://technet.microsoft.com/en-us/library/cc754518.aspx#_blank”tpHYPERLINK
“http://technet.microsoft.com/en-us/library/cc754518.aspx#_blank”: //technetHYPERLINK
“http://technet.microsoft.com/en-us/library/cc754518.aspx#_blank”. microsoftHYPERLINK
“http://technet.microsoft.com/en-us/library/cc754518.aspx#_blank”. com/enus/library/cc754518HYPERLINK “http://technet.microsoft.com/enus/library/cc754518.aspx#_blank”. aspx
httpHYPERLINK “http://technet.microsoft.com/en-us/library/cc754518.aspx#_blank”:
//technetHYPERLINK “http://technet.microsoft.com/en-us/library/cc754518.aspx#_blank”.
microsoftHYPERLINK “http://technet.microsoft.com/en-us/library/cc754518.aspx#_blank”. com/enus/library/cc754518HYPERLINK “http://technet.microsoft.com/enus/library/cc754518.aspx#_blank”. aspx