70-291 Implementing, Managing, and Maintaining a Microsoft Windows Server 2003 Network Infrastructure Certification Exam

Demo Question 10.

You work as the network administrator at EliteCertify.com. The EliteCertify.com network consists of a single Active Directory domain named EliteCertify.com. All servers on the EliteCertify.com network run Windows Server 2003 and all client computers run Windows XP Professional. The EliteCertify.com network contains 400 client computers and one server computer functioning as a Microsoft Internet Security and Acceleration (IS

A. Server. There are three hundred users who work from remote locations. These remote users dial in to the company LAN to establish Internet connection and use VPN connection to connect to EliteCertify -SR24. Connection speeds among the dial-in users range from 28.8 Kbps to 3 Mbps. The EliteCertify.com proxy server logs a higher level of Internet activity when the dial-in users connect and the EliteCertify.com DNS server sends queries to two Internet service provider (ISP) DNS servers. EliteCertify.com dial in users complain that regardless of their connection speeds, local Web browsing for public Internet pages slows dramatically whenever they establish a VPN connection to EliteCertify -SR24. You have received instruction from the CIO to run a network monitoring utility and verify that the LAN bandwidth utilization is within acceptable limits. A new EliteCertify.com written security policy requires that you resolve the slow Internet performance issue. You decide to use the Connection Manager Administration Kit wizard to configure all the dial-in user connections. Which of the configurations would accomplish this? The Internet Explorer LAN settings must be configured to Automatically detect settings.
B. The DNS IP addresses of the two DNS servers hosted by the ISP as the primary DNS address must be added in the TCP/IP settings for each VPN client connection.
C. Add the DNS IP address of EliteCertify 's DNS server as the primary DNS address in the TCP/IP settings for each VPN client connection.
D. Clear the Make this connection the client's default gateway check box in the TCP/IP settings for each VPN client connection.


Display Answer

Answer: D

Explanation: When the users dial into the network, they use the LAN router as their default gateway to access the Internet. However, when they connect to the VPN server, the VPN server becomes the clients' default gateway. This indicates that all Internet traffic is moving through the VPN server. To prevent this from occurring, configure the TCP/IP settings for each VPN client connection by clearing the Make this connection the client's default gateway check box. Incorrect