A.From Network Interfaces, create a new demand-dial interface. 
B.From the properties of the server, disable multilink connections. 
C.From the port properties, configure the WAN Miniport (PPTP) device. 
D.From the properties of the server, configure the IP address assignment settings. 

A.an IP filter that allows only Internet Control Message Protocol (ICMP) traffic 
B.an IP filter that allows only TCP traffic on port 1701 
C.a pre-shared key for authentication 
D.Kerberos authentication

A.Modify the dial-in properties of the Ras1 account. 
B.Modify the dial-out hours on the demand-dial interface. 
C.Modify the IP demand-dial filters on the demand-dial interface. 
D.Enable Bandwidth Allocation Protocol (BAP) on Server2.

A.Allow dial-in access for the user accounts of all Sales group members. 
B.Deny dial-in access for the user accounts of all users except the Sales group members. 
C.Create a remote access policy and assign the Allow - Remote Access permission. Add the Windows-Groups condition and specify the Sales group. 
D.Create a remote access policy and assign the Deny - Remote Access permission. Add the Windows-Groups condition and specify all Active Directory groups except for Sales.

A.From the Internet Authentication Service snap-in on Server2, create a new RADIUS client. 
B.From the Internet Authentication Service snap-in on Server2, create a new remote access policy. 
C.From the Routing and Remote Access snap-in, configure Server1 to use RADIUS accounting. 
D.From the Routing and Remote Access snap-in, configure Server1 to use RADIUS authentication. 

A.From the local computer policy on Server1, modify the Account Policies settings. 
B.From Active Directory Users and Computers, modify the Security settings of Group1. 
C.From the Routing and Remote Access snap-in, create a new remote access policy. 
D.From the Routing and Remote Access snap-in, open the properties of Server1 and modify the security options.

A.Configure the port properties. 
B.Create and configure a new demand-dial interface. 
C.From the server’s properties, modify the security options. 
D.From the Connections to Microsoft Routing and Remote Access Server policy, add a new condition.

A.On Server1, assign the Client (Respond only) IPSec policy. 
B.On Server2, assign the Server (Request Security) IPSec Policy. 
C.On Server1 and Server2, modify the authentication settings in the Secure Server (Require security) IPSec Policy. 
D.On Server1 and Server2, enable Master Key perfect forward secrecy (PFS) in the Secure Server (Require security) IPSec Policy. 

A.In IIS Manager, enable the Enable client certificate mapping option. 
B.In IIS Manager, replace the certificate with a certificate obtained from a public Certification Authority. 
C.In Local Security Policy, enable Domain Member: Require strong (Windows 2000 or later) session key. 
D.In Local Security Policy, enable Domain Member: Digitally encrypt or sign secure channel data

A.From the DNS console, add Server1 as a name server. 
B.From the DNS console, change dynamic updates to Secure only. 
C.From IP Security Monitor on Server1, enable DNS name resolution. 
D.From IP Security Monitor on Server1, create a new taskpad view.

A.Kerbtray 
B.Sc /query kdc 
C.Netdiag /test:Kerberos 
D.Nltest /sc_query:Contoso.com