Title: Lesson 16: Quiz
Course: RITA MC - ITNW 1308 > Section: Lesson 16: Configuring Remote Connections

Q: You must deploy at least one or more BranchCache-enabled servers at your main office to enable BranchCache. Which of the following server types is not an option as aBranchCache-enabled server?
- FTP servers
- File servers (SMB)
- BITS servers
- Web servers
A: FTP servers
Feedback: BranchCache supports file requests using Server Message Blocks (SMB), the standard Windows file sharing protocol; Hypertext Transfer Protocol (HTTP), the standard protocol for web communications; and the Background Intelligent Transfer Service (BITS).

Q: Which of the following benefits is not provided when BranchCache is used?
- You can use metadata to reduce the amount of data traversing the WAN link.
- All data stored in the cache is encrypted.
- Users always have access to the current version of the data.
- Users access data over the faster WAN link.
A: Users access data over the faster WAN link.
Feedback: BranchCache is a feature that can store a copy of the file on a computer (or computers) at the branch office site, so that the server only has to transmit the files over the WAN connection once. All subsequent requests access the file from the cache on the local network.

Q: When using distributed-cache mode for BranchCache, where is the cache hosted in the branch office?
- On all computers in the branch office
- On all server computers in the branch office
- On Windows 8.1 computers in the branch office
- On Windows 7 or Windows 8.1 computers in the branch office
A: On Windows 8.1 computers in the branch office
Feedback: When configured to use Distributed cache mode, each Windows 8.1 workstation on the branch office network caches data from the content server on its local drive and shares that cached data with other local workstations.

Q: To use BranchCache, what operating system must your client workstations be running? (Choose all that apply.)
- Windows 7
- Windows XP
- Windows Vista
- Windows 8.1
A: Windows 7; Windows 8.1
Feedback: To use BranchCache, you must have a server running Windows Server 2008 R2 or Windows Server 2012 at the main office, and computers running Windows Server 2008 R2, Windows Server 2012, Windows 7, or Windows 8.1 at the branch office.

Q: If you have Windows 8.1 Pro workstation clients on your network, what single BranchCache protocol will they be limited to using?
- FTP
- SMB
- HTTP
- BITS
A: BITS
Feedback: Only Windows 8.1 Enterprise includes BranchCache support for the SMB, HTTP, and BITS protocols. The BranchCache implementation in Windows 8.1 Pro supports only BITS traffic.

Q: What is the main difference between BranchCache version 1 and version 2?
- BranchCache V1 uses NTLM authentication, while V2 uses Kerberos authentication.
- BranchCache V1 uses smaller segments of variable length, while V2 uses large, fixed-length file segments.
- BranchCache V1 uses large, fixed-length file segments, while V2 uses smaller segments of variable length.
- BranchCache V1 uses RC4 encrypted file segments, while V2 uses AES 256 encrypted file segments.
A: BranchCache V1 uses large, fixed-length file segments, while V2 uses smaller segments of variable length.
Feedback: BranchCache V1 uses large, fixed-length file segments, while V2 uses smaller segments of variable length. This difference affects the frequency at which cached files must be refreshed from the content server.

Q: On your Windows Server 2012 server, what must you do to enable HTTP and BITS support for BranchCache?
- Install the BranchCache for Network Files role service in the File Services role.
- Install the BranchCache feature.
- Install the BranchCache role.
- Install the BranchCache for Network Files role service in the File Services feature.
A: Install the BranchCache feature.
Feedback: To support SMB requests, the server must have the BranchCache for Network Files role service installed in the File Services role. To support HTTP and BITS requests, you must install the BranchCache feature.

Q: By default, what is the maximum amount of disk space that will be allocated to the BranchCache data cache?
- 5 GB
- 10%
- 5%
- 10 GB
A: 5%
Feedback: The Set percentage of disk space used for client computer cache GPO setting specifies the maximum amount of total disk space that the computer should devote to the BranchCache cache. The default value is five percent.

Q: What advantage does the usage of SSTP for VPN connections offer firewall administrators?
- It uses a commonly open port.
- It creates much less latency.
- It natively supports deep packet inspection.
- It supports encryption proxy by firewalls.
A: It uses a commonly open port.
Feedback: Introduced in Windows Server 2008 and supported only by clients running Windows Vista SP1 or later, SSTP encapsulates PPP traffic using the Secure Sockets Layer (SSL) protocol supported by virtually all web servers. The advantage of this is that administrators do not have to open an additional external firewall port in the server, as SSTP uses the same TCP port 443 as Secure Sockets Layer (SSL). SSTP uses certificates for authentication, with the EAP-TLS authentication protocol and, in addition to data encryption, provides integrity checking and enhanced key negotiation services.

Q: For VPN connections involving Windows clients, what is typically the preferred protocol?
- Point-to-Point Tunneling Protocol (PPTP)
- Layer 2 Tunneling Protocol (L2TP)
- Secure Socket Tunneling Protocol (SSTP)
- Internet Key Exchange, Version 2 (IKEv2)
A: Layer 2 Tunneling Protocol (L2TP)
Feedback: L2TP/IPsec can use certificates or preshared keys for authentication, although administrators typically use the latter only for testing. The end result is that the L2TP/IPsec combination provides a more complete set of services than PPTP, including packet origin identification, data integrity checking, and replay protection. For VPN connections involving Windows clients, L2TP/IPsec is the preferred protocol.

Q: What is the minimum client operating system required to use Secure Socket Tunneling Protocol (SSTP) VPN connections?
- Windows XP Professional SP3
- Windows 7 SP1
- Windows 8.1
- Windows Vista SP1
A: Windows Vista SP1
Feedback: Introduced in Windows Server 2008 and supported only by clients running Windows Vista SP1 or later, SSTP encapsulates PPP traffic using the Secure Sockets Layer (SSL) protocol supported by virtually all web servers.

Q: Windows 8.1 supports multiple types of EAP-based authentication for VPN connections. Which of these is not supported for VPN connections?
- Protected EAP (PEAP)
- Secure Password (EAP-MSCHAPv2)
- Smart Card or other certificate
- EAP-TLS
A: EAP-TLS
Feedback: EAP-TLS is used for Wi-Fi authentication when configured for WPA2-Enterprise security. Windows 8.1 supports three types of EAP-based authentication: Protected EAP (PEAP), Secure Password (EAP-MSCHAPv2), and Smart Card or other certificate. EAP-MSCHAPv2, the default selection for new connections and the strongest password-based mechanism in Windows 8.1, requires a certificate only at the server. The Smart Card or other certificates option requires the clients, as well as the server, to have a certificate, stored either on a smart card or in the computer’s certificate store.

Q: Which VPN protocol does not support using Password Authentication Protocol (PAP), Challenge Handshake Authentication Protocol (CHAP), and Microsoft Challenge Handshake Authentication Protocol Version 2 (MSCHAPv2), and instead can only use EAP-MSCHAPv2 or a certificate for authentication?
- Point-to-Point Tunneling Protocol (PPTP)
- Layer 2 Tunneling Protocol (L2TP)
- Secure Socket Tunneling Protocol (SSTP)
- Internet Key Exchange, Version 2 (IKEv2)
A: Internet Key Exchange, Version 2 (IKEv2)
Feedback: IKEv2 connections must use EAP-MSCHAPv2 or a certificate.

Q: When creating security health validators (SHVs) that ensure that all clients meet a minimum set of criteria before allowing them to connect, administrators have a variety of options to select from. Which of the following options are available? (Choose all that apply.)
- Up-to-date anti-spyware protection
- A properly functioning firewall
- Up-to-date anti-virus protection
- Installation of the latest Windows updates
A: Up-to-date anti-spyware protection; A properly functioning firewall; Up-to-date anti-virus protection; Installation of the latest Windows updates
Feedback: Network Access Protection (NAP) is a component of the Network Policy and Access Services role in Windows Server 2012, Windows Server 2008 R2, and Windows Server 2008, which is designed to prevent potentially dangerous clients-local or remote-from connecting to the network. Server administrators can configure NAP with security health validators (SHVs) that ensure that all clients meet a minimum set of criteria before allowing them to connect. The criteria can include any or all of the following: - Up-to-date anti-virus protection - Up-to-date anti-spyware protection - Installation of the latest Windows updates - A properly functioning firewall If a client does not meet all of the required criteria in the SHV, the NAP server can simply deny it access, or it can begin a process of remediation, in which the client is essentially quarantined to an isolated network that provides access only to the resources it needs to bring it into compliance.

Q: Which of the following items would not meet the requirements for a DirectAccess server?
- A direct connection to the company intranet
- A connection to the Internet through a NAT proxy
- Membership in an AD DS domain
- At least one network interface adapter installed
A: A connection to the Internet through a NAT proxy
Feedback: The DirectAccess server must have a direct connection to the Internet (that does not use NAT or a similar technology).

Q: How many devices does Broadband Tethering support?
- 1
- Up to 3
- Up to 5
- Up to 10
A: Up to 10
Feedback: Windows 8.1 introduce Broadband Tethering capability for any device, PC, or tablet that is broadband-enabled. So, any device running Windows 8.1 will have tethering built in, supporting up to 10 devices which can utilize the same connection to the Internet.

Q: Which of the following is necessary in order to connect to a mobile device running Windows 8.1 that uses Broadband Tethering?
- A username and pin
- A username and password
- A network name and password
- A network name and pin
A: A network name and password
Feedback: To connect to a shared connection based on Broadband Tethering, you need a network name and a password. The password must be 8 characters or more.