VCP-310, 350-001 testking and 640-802 dumps

You need to test the remote access security solutions. To this end in the test
environment in the Chicago office, you install an IAS server on TestRAS1. After
RADIUS clients have been configured appropriately, users in the test environment
who attempt to connect via TestVPN1 are not authenticated. You need to address
this issue for deployment to the production network.350-001 You thus need to ensure that
all Testdomain user accounts are authenticated using the IAS on TestRAS1

What should you do?

A. Upgrade TestRAS1 to domain controller.
B. Upgrade both TestRAS1 and TestVPN1 to domain controllers.


Leading the way in IT testing and certification tools, www.certifyme.com
- 60 -

C. Add TestRAS1 to the RAS and IAS Servers group in Active Directory.
D. Add TestRAS1 and TestVPN1 to the RAS and IAS Servers group in Active Directory.
Answer: C
Explanation: Given that the RADIUS clients have been configured appropriately, you
need to ensure that the RADIUS server is properly configured. For TestRAS1 to be able
to perform authentication, it must have permission to read the attributes from the user
object in Active Directory. By default this permission is not granted when RAS/IAS is
installed on a member server.640-802 This permission is assigned when you add the server, in
this case, TestRAS1 to the built-in RAS and IAS Servers security group.

Incorrect answers:
A: In the production environment, RAS1 is not a domain controller. This will make the
test invalid.
B: The test results would be invalid. Besides if TestRas1 were to be upgraded to domain
controller status then you will add additional security concerns to the design.
D: This will be obsolete since you only require the IAS server to access user attributes in
Active Directory.VCP-310 There is no need to add TestVPN also to the RAS and IAS Servers
group in Active Directory.

Reference:
Elias N. Khnaser, Susan Snedak, Chris Peiris and Rob Amini, MCSE Designing Security
for a Windows Server 2003 Network Exam 70-298 Study Guide, Chapter 6, pp. 369-370
James Chellis, Paul Robichaux & Matthew Sheltz, MCSA/MCSE: Windows Server 2003
Network Infrastructure Implementation, Management, and Maintenance Study Guide, p.
335