Exam 70-741 topic 2 question 42 discussion

Actual exam question from Microsoft's 70-741

Question #: 42
Topic #: 2

You have servers that run Windows Server 2016 and devices that run Windows 10 Enterprise.
You have a certification authority (CA) that issued computer certificates to all the servers and devices.
You plan to allow the Windows 10 devices to connect to the network remotely by using VPN device tunnels.
You install the Remote Access server role on a server. From the Routing and Remote Access console, you configure the server for the VPN role.
You need to ensure that the Windows 10 devices can establish the VPN tunnel before users sign in to the devices.
What should you do on the VPN server?

A. From Authentication Methods, select Allow machine certificate authentication for IKEv2.
B. Modify the ports properties and add additional SSTP ports.
C. From Authentication Methods, select Extensible authentication protocol (EAP).
D. Modify the ports properties and add additional IKEv2 ports.

Show Suggested Answer

Suggested Answer: A 🗳️
References:
https://docs.microsoft.com/en-us/windows-server/remote/remote-access/vpn/vpn-device-tunnel-config https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/ee922682(v=ws.10)

by DMc at July 4, 2020, 5 a.m.

Comments

Submit Cancel

DMc

Highly Voted 4 years, 12 months ago

https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/ee922682%28v=ws.10%29 When using Device Tunnel with a Microsoft RAS gateway, you will need to configure the RRAS server to support IKEv2 machine certificate authentication by enabling the Allow machine certificate authentication for IKEv2 authentication method as described here.

upvoted 5 times

...

panda

Most Recent 4 years, 5 months ago

In this situation, you are changing settings for VPN to Always On VPN(*1). Since it is a feature in Windows 10 clients(*2). When you use this, you must change the authenticating methods to IKEv2 on Authentication Methods screen. (*1) https://directaccess.richardhicks.com/2018/02/05/what-is-the-difference-between-directaccess-and-always-on-vpn/ (*2) https://docs.microsoft.com/en-us/windows-server/remote/remote-access/vpn/vpn-device-tunnel-config

upvoted 1 times

panda

4 years, 5 months ago

I think A is correct.

upvoted 2 times

...