70-413 Exam Network Access Services 1 — Questions and Answers
Question 1: Which VPN protocol uses SSL/TLS over port 443 and can traverse most firewalls and NAT devices without additional configuration?
- PPTP
- L2TP/IPsec
- SSTP (Correct answer)
- IKEv2
Correct answer: SSTP
SSTP (Secure Socket Tunneling Protocol) encapsulates PPP traffic over SSL/TLS using port 443, allowing it to pass through firewalls that block other VPN protocols.
Question 2: What is the minimum Windows Server version required to deploy DirectAccess as a remote access solution?
- Windows Server 2003
- Windows Server 2008
- Windows Server 2008 R2 (Correct answer)
- Windows Server 2012
Correct answer: Windows Server 2008 R2
DirectAccess was first introduced in Windows Server 2008 R2 as a seamless, always-on remote access technology for domain-joined clients.
Question 3: Which VPN protocol provides seamless reconnection when a client switches between network interfaces, such as moving from Wi-Fi to a cellular connection?
- PPTP
- SSTP
- IKEv2 (Correct answer)
- L2TP/IPsec
Correct answer: IKEv2
IKEv2 supports the MOBIKE extension, which allows VPN sessions to persist across changes in the client's IP address or network interface, providing seamless reconnection.
Question 4: In Windows Server 2012 R2, which role service under the Remote Access server role provides both DirectAccess and VPN functionality?
- Network Policy Server
- Routing and Remote Access
- DirectAccess and VPN (RAS) (Correct answer)
- Web Application Proxy
Correct answer: DirectAccess and VPN (RAS)
The DirectAccess and VPN (RAS) role service, installed as part of the Remote Access server role, enables both DirectAccess and traditional VPN remote access capabilities.
Question 5: In a Network Access Protection (NAP) deployment, which component provides non-compliant clients with software updates and configuration changes to achieve compliance?
- Health Registration Authority
- Remediation Servers (Correct answer)
- System Health Validators
- Network Policy Server
Correct answer: Remediation Servers
Remediation servers are isolated servers that non-compliant NAP clients can access to download updates, patches, or configuration changes needed to meet health policy requirements.
Question 6: Which authentication protocol should be configured for VPN connections to provide certificate-based mutual authentication between the client and server?
- PAP
- CHAP
- MS-CHAPv2
- EAP-TLS (Correct answer)
Correct answer: EAP-TLS
EAP-TLS uses X.509 certificates for mutual authentication, requiring both the VPN server and the client to present valid certificates, providing strong, certificate-based security.
Question 7: Which IPv6 transition technology used by DirectAccess encapsulates IPv6 traffic inside HTTPS packets, enabling connectivity through NAT devices and strict firewalls?
- Teredo
- 6to4
- IP-HTTPS (Correct answer)
- ISATAP
Correct answer: IP-HTTPS
IP-HTTPS is an IPv6 transition technology that encapsulates IPv6 packets within HTTPS (port 443) traffic, allowing DirectAccess clients to connect even through NAT and restrictive firewalls.
70-413 Exam Network Access Services 1
Which VPN protocol uses SSL/TLS over port 443 and can traverse most firewalls and NAT devices without additional configuration?