Your network contains two Active Directory forests named contoso.com and fabrikam.com. You
have a standalone Network Policy Server (NPS) named NPS1. You have a VPN server named VPN1.
VPN1 is configured as a RADIUS client to NPS1. You need to ensure that users from both forests can
establish VPN connections by using their own domain accounts. What should you do?

A.
On NPS1, configure remediation server groups.

B.
On NPS1, configure connection request policies.

C.
On VPN1, modify the DNS suffix search order.

D.
On VPN1, modify the IKEv2 Client connection controls.