A.ConfigureRRAS2asaVPNserver.UseWebenrollmenttoacquirecomputercertificatesforbothRRAS1andRRAS2.Createdemand-dialL2TP\/IPSecconnectionsonbothRRAS1andRRAS2.Configuredial-outcredentialsonbothRRAS1andRRAS2.EnabletheBasicFirewallsettingsonRRAS1andRRAS2
B.ConfigureRRAS2asaVPNserver.Createdemand-dialL2TP\/IPSecconnectionsonbothRRAS1andRRAS2.Configuredial-outcredentialsonbothRRAS1andRRAS2.ConfigurestaticroutesonbothRRAS1andRRAS2.Settheconnectiontypetopersistentonthedemand-dialinterfaceonbothRRAS1andRRAS2
C.CreateanewOUnamedRRASServersintheboston.northwindtraders.comdomain.MoveRRAS1intotheRRASServersOU.OntheDefaultDomainPolicyGroupPolicyobject（GPO），edittheSecureServer（RequireSecurity）IPSecpolicy.ConfiguretheIPSecpolicytouseacertificateforauthentication.SpecifyRRAS2asthetunnelendpoint.AssigntheIPSecpolicy.
D.CreateanewOUnamedRRASServerinthenorthwindtraders.comdomain.MovetheRRAS2intotheRRASServersOU.OntheRRASServersOUcreatenewGroupPolicyobject（GPO）namedIPSECPOL.InIPSECPOLcreateanIPSecpolicyandspecifyRRASasthetunnel.
参考答案：B
