YourcompanyconsistsofasingleActiveDirectorydomainthatisconfiguredinWindows2000nativemode.AllserversrunWindowsServer2003ServicePack2(SP2).YoudeployaRoutingandRemoteAccessservertoprovideVPNaccesstothenetwork.YouneedtoensurethatonlymembersofagroupnamedSalescanaccessthenetworkthroughtheVPN.Thesolutionmustminimizetheadministrativeeffortrequiredtomanageremoteaccess.Whatshouldyoudo?（）
A.Allowdial-inaccessfortheuseraccountsofallSalesgroupmembers.
B.Denydial-inaccessfortheuseraccountsofallusersexcepttheSalesgroupmembers.
C.CreatearemoteaccesspolicyandassigntheAllow-RemoteAccesspermission.AddtheWindows-GroupsconditionandspecifytheSalesgroup.
D.CreatearemoteaccesspolicyandassigntheDeny-RemoteAccesspermission.AddtheWindows-GroupsconditionandspecifyallActiveDirectorygroupsexceptforSales.
参考答案：C
