70-350 Implementing Microsoft Internet Security and Acceleration (ISA) Server 2004 Certification Test

Demo Question 18.

You work as the network administrator at EliteCertify.com. The EliteCertify.com network consists of a single Active Directory domain named EliteCertify.com. The client computers at EliteCertify.com are running Windows XP Professional. EliteCertify.com has its headquarters in Chicago and a branch office in Dallas. EliteCertify.com network contains two ISA Server 2004 computers named EliteCertify -SR21 and EliteCertify -SR22 respectively. EliteCertify -SR21 is located in Chicago and EliteCertify -SR22 is located in Dallas. Chicago and Dallas are connected with an IPSec tunnel mode site-to-site VPN. EliteCertify -SR21 that is in Chicago has three addresses bound to its external network adapter. EliteCertify -SR22 in Dallas makes use of a non-primary IP address to establish the IPSec tunnel mode connection to EliteCertify -SR21. The employees in Dallas report that they can connect to file shares at Chicago, but cannot connect to the Microsoft Outlook Web Access Web site. You need to ensure that the employees in Dallas can access the Outlook Web Access Web site. What should you do?

A. You need to use a network address translation (NAT) relationship between the Chicago and Dallas network.
B. You need to add IP addresses to the external network adapter of EliteCertify -SR22.
C. You need to change the Phase II IPsec configuration on both EliteCertify -SR21 and EliteCertify -SR22 to use Message Digest 5 (MD5) as its integrity algorithm.
D. You need to create a new protocol definition for TCP port 80 outbound and use the definition in the access rule.


Display Answer

Answer: D

Explanation: The employees in the Dallas office can connect to file shares at the main office, which means that the VPN tunnel has been correctly setup and is fully functional. All you need to do is create a rule that allow the employees in Dallas to connect to the OWA website. This means that you must create a new protocol definition for TCP port 80 outbound and use the definition in the access rule.