A12 Mcts 70-680 Direct Access

Front 1

Direct Access

Tip

VPN allows you to access a workplace network remotely.

Back 1

Direct Access

Tip

VPN allows you to access a workplace network remotely.

Front 2

Direct Access

Abbrev: NAP

Back 2

Network Access Protection

Front 3

Direct Access

What is Direct Access ?

Back 3

Direct Access is an automatic connectivity solution that allows clients running Windows 7 to connect to the corporate intranet the moment they establish a connection to the global Internet.

Front 4

Direct Access

Can Direct Access be run on IPV4 ?

Back 4

NO

DirectAccess only uses IPV6.

Front 5

Direct Access

Direct Access vs VPN

Back 5

The connection process is automatic (in DA) and does not require user intervention or logon. Users must initiate VPN connections to the corporate intranet manually.

DirectAccess is bidirectional, with servers on the intranet being able to interact with the client running Windows 7. Traditional VPN solutions, the client can access the intranet but servers on the intranet cannot initiate communication with the client.

DirectAccess provides administrators with greater flexibility in controlling which intranet resources are available to remote users

Front 6

Direct Access

Which Editions of Windows 7 Support Direct Access?

Back 6

Only domain-joined clients running Windows 7 Enterprise and Ultimate editions support DirectAccess.

Front 7

Direct Access

Tip

Group Policy settings override settings manually configured using Netsh Commands.

Back 7

Direct Access

Tip

Group Policy settings override settings manually configured using Netsh Commands.

Front 8

Direct Access

How does the Direct Access Server authenticate Users ?

Back 8

DirectAccess clients use digital certificates to authenticate with the DirectAccess server.

Front 9

Direct Access

Tip :

DirectAccess clients and the DirectAccess server almost always receive their certificates from an Active Directory Certificate Services Certificate Authority that is integrated into the domain.

Back 9

Tip :


DirectAccess clients and the DirectAccess server almost always receive their certificates from an Active Directory Certificate Services Certificate Authority that is integrated into the domain.

Front 10

Direct Access

Abbrev: ADCS \ CA

Back 10

Active Directory Certificate Services \ Certificate Authority

Front 11

Direct Access

DirectAccess server needs the following requirements:

Back 11

The computer needs to have Windows Server 2008 R2 installed and be a member of a domain.

This server must have two network adapters.

One of these network adapters needs to a direct connection to the Internet. You must assign this adapter two consecutive public IPv4 addresses.

The second network adapter needs a direct connection to the corporate intranet.

The computer needs digital certificates to support server authentication. This includes having a computer certificate that matches the fully qualified domain name (FQDN)that is assigned to the IP addresses on the DirectAccess server’s external network interface.

Front 12

Direct Access

How does Direct establish connections with client running IPV4 or !PV6 ?

Back 12

If a client running Windows 7 has a public IPv6 address, a direct IPv6 connection is made.

If the client has a public IPv4 address, a connection is made using the 6to4 transition technology. If the client has a private IPv4 address, a connection is made using the Teredo transition technology.

If the client has a private IPv4 address and is behind a firewall that restricts most forms of network traffic, a connection using IP-HTTPS is made.

Front 13

How is DirectAccess deployed?

Back 13

When deploying DirectAccess, you can use

* the DirectAccess Management Console

* a scripted installation (netsh commmands), or

* Group Policy

Front 14

Abbrev : PKI

Back 14

Public Key Infrastructure

Front 15

Abbrev : NAT

Back 15

Network Address Translation

Front 16

What are the different models of access when deploying DirectAccess ?

Back 16

The three main models of access you can use when deploying DirectAccess are

* full intranet access

* selected server access ( IPSec ), and

* end-to-end access

Front 17

Tip :

The DirectAccess Management Console is used with simple deployments. You should use Group Policy when deploying DirectAccess in domain environments.

Back 17

The DirectAccess Management Console is used with simple deployments. You should use Group Policy when deploying DirectAccess in domain environments.