ExamTopics Logo
Mail Us[email protected]
Menu
Microsoft Discussions
exam questions

Exam 70-743 All Questions

View all questions & answers for the 70-743 exam
Go to Exam

Exam 70-743 topic 1 question 111 discussion

Actual exam question from Microsoft's 70-743
Question #: 111
Topic #: 1
[All 70-743 Questions]

DRAG DROP -
You are deploying DirectAccess to a server named DA1.
DA1 will be located behind a firewall and will have a single network adapter.
The intermediary network will be IPv4.
You need to configure firewall to support DirectAccess.
Which firewall rules should you create for each type of traffic? To answer, drag the appropriate ports and protocols to the correct traffic types. Each port and protocol may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
Select and Place:

Show Suggested Answer Hide Answer
Suggested Answer:
by jtrott at Jan. 29, 2019, 7:41 a.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
jtrott
Highly Voted 5 years, 10 months ago
Answer: Teredo Traffic: UDP 3544 6to4 Traffic: Protocol 41 IP-HTTPS: 443
upvoted 11 times
...
augustogcn
Most Recent 4 years ago
I believe Protocol 1 is ICMP, so according to the below article jtrott is right. Configure packet filters on your Internet firewall to allow the following types of IPv4 traffic for the Forefront UAG DirectAccess server: Protocol 41 inbound and outbound—For DirectAccess clients that use the 6to4 IPv6 transition technology to encapsulate IPv6 packets with an IPv4 header. In the IPv4 header, the Protocol field is set to 41 to indicate an IPv6 packet payload. UDP destination port 3544 inbound and UDP source port 3544 outbound—For DirectAccess clients that use the Teredo IPv6 transition technology to encapsulate IPv6 packets with an IPv4 and UDP header. The Forefront UAG DirectAccess server is listening on UDP port 3544 for traffic from Teredo-based DirectAccess clients. TCP destination port 443 inbound and TCP source port 443 outbound—For DirectAccess clients that use IP-HTTPS to encapsulate IPv6 packets within an IPv4-based HTTPS session. The Forefront UAG DirectAccess server is listening on TCP port 443 for traffic from IP-HTTPS-based DirectAccess clients.
upvoted 1 times
...
montonearm
5 years ago
https://social.technet.microsoft.com/wiki/contents/articles/901.directaccess-and-firewalls-and-nat.aspx Think that for additional confirmation the link can be usefull
upvoted 3 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago