70-291 Implementing, Managing, and Maintaining a Microsoft Windows Server 2003 Network Infrastructure Exam Questions

Demo Question 8.

You work as the network administrator at EliteCertify.com. The EliteCertify.com network consists of a single Active Directory domain named EliteCertify.com. All servers on the EliteCertify.com network run Windows Server 2003 and all client computers run Windows XP Professional. The EliteCertify.com network contains a server named EliteCertify -SR24 configured to run Routing and Remote Access to be a VPN server and only uses TCP/IP protocol. One of the EliteCertify.com vendors every day establishes connections to EliteCertify -SR24 and uploads data to EliteCertify -SR24. Only this vendor has remote access permissions for EliteCertify -SR24. Later you discover the vendor has accessed others computers on the network. What should you do to prevent the vendor from gaining access to the network to which EliteCertify -SR24 is connected?

A. On EliteCertify -SR24, run the route -p command from a command prompt.
B. A remote access policy must be created for the vendor. The NAS-Port-Type matches Virtual (VPN) condition for incoming connection requests must be added to the remote access policy.
C. The Routing and Remote Access console must be opened on EliteCertify -SR24. The Multilink connections check box in the server properties must be cleared.
D. The Routing and Remote Access console must be opened on EliteCertify -SR24. The Enable IP routing check box in the server properties must be cleared.


Display Answer

Answer: D

Explanation: The Enable IP Routing checkbox regulates whether RRAS will route IP packets between a remote client and the other interfaces on a RRAS server. Therefore, when the option is enabled, a packet of a remote client can move to any host to which the RRAS server has a route. The option is enabled by default. Clear the Enable IP routing check box in the server properties to restrict the vendor to accessing resources on only the RRAS server. By clearing this checkbox you disable the vendor accessing the other computers on the network without denying the vendor access to EliteCertify -SR24. Incorrect