READ Free Dumps For Microsoft- 70-410
| Question ID 10383 | Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2012 R2.
You create a new inbound rule by using Windows Firewall with Advanced Security.
You need to configure the rule to allow Server1 to accept unsolicited inbound packets that are received through a network address translation (NAT) device on the
network.
Which setting in the rule should you configure?
|
| Option A | Interface types
|
| Option B | Authorized computers
|
| Option C | Remote IP address
|
| Option D | Edge traversal
|
| Correct Answer | D |
Explanation Explanation/Reference: Edge traversal - This indicates whether edge traversal is enabled (Yes) or disabled (No). When edge traversal is enabled, the application, service, or port to which the rule applies is globally addressable and accessible from outside a network address translation (NAT) or edge device. Select one of the following options from the list: Block edge traversal (default) Prevent applications from receiving unsolicited traffic from the Internet through a NAT edge device. Allow edge traversal Allow applications to receive unsolicited traffic directly from the Internet through a NAT edge device. Defer to user Let the user decide whether to allow unsolicited traffic from the Internet through a NAT edge device when an application requests it. Defer to application Let each application determine whether to allow unsolicited traffic from the Internet through a NAT edge device. Reference: http://technet.microsoft.com/en-us/library/cc731927.aspx
| Question ID 10384 | Your network contains an Active Directory domain named contoso.com. All servers run Windows Server 2012 R2. A server named Server1 is configured to encrypt
all traffic by using IPSec.You need to ensure that Server1 can respond to ping requests from computers that do not support IPSec. What should you do?
|
| Option A | From a command prompt, run netsh set global autotuninglevel = highlyrestrictedcongestionprovider=none.
|
| Option B | From a command prompt, run netsh set global autotuninglevel = restricted congestionprovider = ctcp.
|
| Option C | From Windows Firewall with Advanced Security, allow unicast responses for the Domain Profile.
|
| Option D | From Windows Firewall with Advanced Security, exempt ICMP from IPSec.
|
| Correct Answer | D |
Explanation