|
Home > Archive > 70-216 > August 2002 > Pavlov's Sun 70-216 Question of the Day
You are viewing an archived Text-only version of the thread.
To view this thread in it's original format and/or if you want to reply to
this thread please [click here]
| Author |
Pavlov's Sun 70-216 Question of the Day
|
|
| wbafrank 2002-08-04, 7:45 am |
|  And today's poser is ....
Q25. You are responsible for a Remote Access Server in a Windows 2000 native mode domain. The remote access permission for all user accounts is set to "Control access through Remote-Access Policy". One of your users named Alison is a member of the English group and the Tutors group. The Tutors group has been granted remote access permission through a remote access policy ("Policy1") However the English group has been denied remote access permission through a different remote access policy ("Policy2").
Because Policy1 is listed first and Policy2 is listed second, Alison is permitted to dial in to the Remote Access Server. Another user on your network named Frank is only a member of the English group and therefore cannot access the Remote Access Server. He asks you to modify the configuration to allow members of the English group to dial in to the server. If you agree to do so what action would you perform to accomplish this?
A. Using the Routing and Remote Access, drag the English group across from the "Denied Access" box to the "Allow Access" box.
B. Using Routing and Remote Access, change the permission for Policy2 from "Deny remote access permission" to "Allow remote access permission".
C. Using the Routing and Remote Access, select the English group, right-click and select properties and check the "Allow Access" box.
D. Using the Routing and Remote Access, select the English group, right-click, select properties and deselect the "Deny Access" box.
Good Luck .... see you tomorrow for the answer!! | |
| Deja-vue 2002-08-04, 7:53 am |
| hmmmm... B.
 | |
| Pavlov 2002-08-04, 8:06 am |
| You are too kind to me - special questions and all
And you've obviously found my weakest area - RRAS combined with multiple policies 
Okay - I'll give it the ol' college try again and go with B, however, it should say "Grant Remote Access Permssion", not "Allow..." | |
|
| I'll go with "B" as well, and Pav is right, it should state "Grant" not "Allow" | |
| unreal 2002-08-04, 7:22 pm |
| It should be 'B'- not so darn sure | |
| Tech Ranger 2002-08-04, 10:18 pm |
| I will choose "B". B is usually correct for RRAS questions. | |
| wbafrank 2002-08-05, 10:58 am |
| quote:
Originally posted by wbafrank
And today's poser is ....
Q25. You are responsible for a Remote Access Server in a Windows 2000 native mode domain. The remote access permission for all user accounts is set to "Control access through Remote-Access Policy". One of your users named Alison is a member of the English group and the Tutors group. The Tutors group has been granted remote access permission through a remote access policy ("Policy1") However the English group has been denied remote access permission through a different remote access policy ("Policy2"). Because Policy1 is listed first and Policy2 is listed second, Alison is permitted to dial in to the Remote Access Server. Another user on your network named Frank is only a member of the English group and therefore cannot access the Remote Access Server. He asks you to modify the configuration to allow members of the English group to dial in to the server. If you agree to do so what action would you perform to accomplish this?
A. Using the Routing and Remote Access, drag the English group across from the "Denied Access" box to the "Allow Access" box.
B. Using Routing and Remote Access, change the permission for Policy2 from "Deny remote access permission" to "Allow remote access permission".
C. Using the Routing and Remote Access, select the English group, right-click and select properties and check the "Allow Access" box.
D. Using the Routing and Remote Access, select the English group, right-click, select properties and deselect the "Deny Access" box.
And the answer is ....
Correct Answer: B
If you would like to allow connections only for those user accounts that belong to a specific set of groups perform the following steps:
1. Create a new policy.
2. Add the Windows-Groups condition to the new policy, and then add the groups that are allowed remote access.
3. Select the Grant remote access permission option on the new policy. |
|
|
|
|