100% Pass Guarantee with Juniper JPR-934 Dumps!

The ABC.com network consists of a single Active Directory domain named ABC.com. ABC.com has its headquarters in Chicago and several branch offices at various locations throughout the country. All servers on the ABC.com network run Windows Server.

You are in the process of configuring a VPN connection between the Chicago office and a branch office in Dallas using Windows Server computers running Routing and Remote Access (RRAS).

A ABC.com written security policy states that the requirements below must be met:

Data transmitted over the VPN must be encrypted with end to end encryption.

The VPN connection authentication should be at the computer level rather than at user level and with no credential information transmitted over the internet.

How should you configure the VPN? (Choose two.)

A. Use a PPTP connection.

B. Use EAP-TLS authentication.

C. Use a PPP connection.

D. Use MS-CHAP v2 authentication.

E. Use MS-CHAP authentication.

F. Use PAP authentication.

G. Use an L2TP/IPSec connection.

The ABC.com network consists of a single Active Directory domain named ABC.com.

You deploy an enterprise certification authority (CA) on a Windows Server computer named ABC-CA1. The primary purpose of the CA is issue company users with digital certificates to enable them to authenticate with the new company Intranet website. You create a new certificate template named Web Authentication. You enable the Web Authentication certificate template on ABC-CA1 and configure the default domain group policy so that users who log on to the domain receive a Web

Authentication certificate.

The following morning users complain that they do not have certificates which can be used to authenticate to the Intranet Web site.

How can you ensure the users are issued with a certificate?

A. By configuring ABC-CA1 to be an Enterprise Subordinate CA of a public CA such as Verisign.

B. By modifying the permissions of the Web Authentication certificate template to give the Domain Users group the Allow – Autoenroll permission.

C. By adding your Domain Admin user account to the Cert Managers group in Active Directory.

D. By configuring the Default Domain Controllers GPO to assign the certificates to users when they log on.

You are a network administrator for your Windows Server domain and you are updating the network configuration for your company. You have used part of the 191.99.74.0/16 IP address range that your company owns and segmented the

networks in this new location in such a way to allow for 60 hosts per subnet currently and also allow for an anticipated growth of 15% for the client systems.

Your design also calls for adding a routing configuration that will allow you to forward IP multicast traffic and the use of the Internet Group Management Protocol (IGMP). You have decided to use the Routing and Remote Access Service on

your Windows Server system to handle this requirement in your environment. You also need to define the standards for your network nodes with regard to multicasting on your network.

What is a specific characteristic that is required of a host or network node that is multicast-capable?

Select the best answer.

A. The network node must be able to use a multicast routing protocol to propagate multicast group listening information to other multicast-capable nodes.

B. The network node must be able to listen for all multicast traffic on all attached networks. Upon receiving multicast traffic the node would have to forward the multicast packet to attached networks where other nodes are listening or where downstream routers have nodes that are listening.

C. The network node must be able to listen for IGMP membership report messages and update the TCP/IP multicast forwarding table.

D. The network node must be able to register the multicast addresses being listened to by the node with local routers so that multicast packets can be forwarded to the network of the node.