Answers UAG DirectAccess Contest Quiz 1 Round 1
Here are the answers to Quiz 1, Round 1:
====================================================
Question 1: Which Operating System(s) can be configured as DirectAccess clients? (choose the best answer)
A. Windows 7
B. Windows Vista SP2
C. Windows Server 2008 R2
D. Windows 7 and Windows Vista SP2
E. Windows Server 2008 R2 and Windows 7
The answer to question 1 is E. Actually, a couple of people pointed out to me that I should have mentioned that you needed Enterprise or Ultimate Edition of Windows 7. While that is true, the editions are different SKUs, and not different operating systems. Therefore, the answer is Windows 7 and Windows Server 2008 R2 when asked which operating system.
====================================================
Question 2: What happens when the DirectAccess client successfully connects to the Network Location Server (NLS)?
A. The DirectAccess client turns on the Windows Firewall Domain Profile
B. The DirectAccess client disables its ISATAP interface
C. The DirectAccess client disables the Name Resolution Policy Table
(note: there was a typo in answer C – I left out the word “client”, but the meaning of the answer remains unchanged)
The answer to question 2 is C. When the DA client connects to the intranet and successfully connects to the Network Location Server and receives a 200 HTTP response that is acceptable to WinHTTP (that is to say, that WinHTTP is able to successfully parse the web page) it will disable the NRPT. You can see the result of this turning off of the NRPT by using the command netsh namespace show effectivepolicy. You can see the result is Note: DirectAccess settings would be turned off when computer is inside corporate network in the figure below.
====================================================
Question 3: When you do an ipconfig /all in a command prompt window and see both the Teredo and IP-HTTPS interfaces assigned an address, which interface is actually being used to transfer data?
A. The Teredo interface
B. The IP-HTTPS interface
C. Both the Teredo and IP-HTTPS interfaces
D. None of the interfaces – when both appear it indicates that the Windows Firewall Domain Profile is active
The answer to question 3 is B. This condition occurs when the DirectAccess client takes more than the computed delay for the DirectAccess client to determine corporate connectivity over the Teredo interface. To test for this condition, run the ipconfig command at a command prompt. If you have global addresses on both the Teredo and IP-HTTPS tunnel interfaces, this condition has occurred.
====================================================
Leaderboard
====================================================
I want to thank everyone who participated in Quiz 1, Round 1. This was a difficult quiz and I pulled some pretty tough questions first time around. Some of the quizzes will be easier, some will be more difficult. But I hope you will continue to play and that you find this a useful and fun learning experience. Quiz 2, Round 1 will be posted on December 9, 2010 – so make sure you put that on your calendar so you don’t miss the quiz because if you do, someone who’s ahead of you now might miss the next quiz and that will be your chance to take the lead! 
For the same reason, those of you who didn’t participate in Quiz 1 still have a chance – so make sure to take next week’s quiz and get yourself on the leaderboard!
====================================================
HTH,
Tom
Tom Shinder
tomsh@microsoft.com
Knowledge Engineer, Microsoft DAIP iX/Forefront iX
UAG Direct Access/Anywhere Access Group (AAG)
The “Edge Man” blog (DA all the time): https://blogs.technet.com/tomshinder/default.aspx
Follow me on Twitter: https://twitter.com/tshinder
Facebook: https://www.facebook.com/tshinder