Your network contains an Active Directory domain named contoso.com. All servers run Windows Server 2012.
A server named Server1 is configured to encrypt alltraffic by using IPSec.
You need to ensure that Server1 can respond to pingrequests from computers that do not support IPSec.
What should you do?
A.
From a command prompt, run netsh set global autotuninglevel = restricted congestionprovider = ctcp.
B.
From Windows Firewall with Advanced Security, exempt ICMP from IPSec.
C.
From a command prompt, run netsh set global autotuninglevel- highlyrestrictedcongestionprovider=none.
D.
From Windows Firewall with Advanced Security, allow unicast responses for the Domain Profile.
Answer B
Based on link
http://technet.microsoft.com/en-us/library/cc749323%28v=ws.10%29.aspx
If you have active connection security rules, it is also helpful for troubleshooting purposes to exempt ICMP from the IPsec requirements temporarily. To do this, in the Windows Firewall with Advanced Security snap-in, in the Properties dialog box, click the IPsec Settings tab and click Yes to Exempt ICMP from IPsec.
0
0
B
Boris is right
0
0
B. Ping uses ICMP.
0
0
B
0
0
Indeed B.
0
0