You have a remote access server named Server1 that runs Windows Server 2016. Server1 has DirectAccess enabled.
You have a proxy server named Server2. All computers on the internet connect to the Internet by using the proxy.
On Server1, you run the command Set-DAClient -ForceTunnel Enabled.
You need to ensure that when a Direct Access client connects to the network, the client accesses all the Internet resources through the proxy.
What should you run on Server1?
A. Set-DAClient
B. Set-DnsClientGlobalSetting
C. Set-DAClientDNSConfiguration
D. Set-DAEntryPoint
C. Set-DAClientDNSConfiguration
By default, DirectAccess is configured to use split tunneling, so that only traffic originally sent towards internal networks will be processed by DirectAccess
encapsulation.
Traffics sent by the DirectAccess clients towards the Internet will not be processed by DirectAccess encapsulation.
In this scenario, a remote DirectAccess client is connected to the internal corporate network and the public Internet at the same time.
Some security administrators perceive split tunneling as a security risk, and the use of split tunneling may be prohibited by corporate security policy.
In addition, enforcing web browsing policies on remote DirectAccess clients might be desired to reduce the risk of exposure from browsing unapproved web sites.
In either case, force tunneling can be configured to meet these requirements.
When force tunneling is enabled, the DirectAccess client sends all traffic, including internal and internet traffic, to be encapsulated by DirectAccess protocol and
being sent back to corporate DirectAccess gateway on the enterprise edge network.
When force tunneling is enabled, DirectAccess administrators can also define an on-premises proxy server for DirectAccess clients to use.
https://docs.microsoft.com/en-us/powershell/module/remoteaccess/set-daclientdnsconfiguration?view=win10-ps
The “Set-DAClientDNSConfiguration” cmdlet configures the DNS server and proxy server addresses of a Name Resolution Policy Table (NRPT) entry and
configures the local name resolution property.