Exam 70-680 topic 1 question 1 discussion

Actual exam question from Microsoft's 70-680

Question #: 1
Topic #: 1

Your network consists of an Active Directory domain and a Direct Access infrastructure.
You install Windows 7 on a new portable computer and join the computer to the domain.
You need to ensure that the computer can establish Direct Access connections.
What should you do?

A. Install a computer certificate.
B. Create a new network connection.
C. Enable the Network Discovery firewall exception.
D. Add the computer account to the Network Configuration Operators group.

Show Suggested Answer

Suggested Answer: A 🗳️
Certificates -
The Direct Access IPsec session is established when the client running Windows 7 and the Direct Access server authenticate with each other using computer certificates. Direct Access supports only certificate-based authentication.
Direct Access Client Configuration
Clients receive their Direct Access configuration through Group Policy. This differs from traditional VPN configuration where connections are configured manually or distributed through the connection manager administration kit. Once you have added the computers client account to the designated security group, you need to install a computer certificate on the client for the purpose of Direct Access authentication. An organization needs to deploy Active Directory Certificate Services so that clients can automatically enroll with the appropriate certificates.

by gomatetu at April 4, 2025, 3:40 p.m.

Comments

Submit Cancel

Currently there are no comments in this discussion, be the first to comment!