350-001 testking,640-802 dumps and VCP-310

You need to design security for remote access users. To this end you must configure
the firewalls to support VPN users.

What should you do?

A. Allow all VPN traffic to traverse both firewalls.
B. Block all VPN traffic on the internal firewall.
C. Allow all VPN traffic to traverse the external firewall.
D. Allow only VPN traffic that originates from 192.168.10.252 by configuring the
external firewall accordingly.
E. Allow only VPN traffic that originates from 131.122.12.0/24, the London office, by
configuring the internal firewall accordingly.
Answer: B, C
Explanation: All Internet traffic that is destined for the Stanford Finance network has to
pass the external firewall and be directed to the VPN server on the external network.350-001 The
other computers are not configured as VPN servers and will therefore not accept VPN
connection requests.
640-802
The VPN server will route authorized requests directly to the New
York office subnet on the internal network, bypassing the internal network.

VCP-310 The return
VPN traffic with responses to VPN client requests will follow the same path in the
opposite direction. This means that you should configure the external firewall to allow all
VPN traffic to pass through. And all VPN traffic on the internal firewall should be
blocked because no legitimate VPN traffic will be directed to the internal firewall.

Incorrect answers:
A : This will not meet the requirements since there will not be any legitimate VPN traffic
that will be directed to the internal firewall. Therefore you should not allow all VPN
traffic to traverse both firewalls.
D : This VPN server is already behind the external firewall and this option is therefore
incorrect.
E


Leading the way in IT testing and certification tools, www.certifyme.com
- 20 -

: If you allow VPN traffic that originate from the London offices by configuring the
internal office accordingly, then you will be allowing illegitimate VPN traffic to pass.

Reference:
Microsoft Windows Server 2003 Deployment Kit: Deploying dial-up and VPN remote
Access Services - designing and providing support for remote access clients
Jerry Honeycutt: Introducing Microsoft Windows Server 2003, Microsoft Press, Chapter
6