单项选择题 Your company has a main office and two branch offices. The main office is located in Montreal. The branch offices are located in Seattle and Winnipeg. In the Montreal office， you have a server named Server1 that runs Windows Server 2003 Web Edition Service Pack 2 （SP2）. Server1 is configured as a VPN router. In the Seattle office， you have a VPN server named Server2. In the Winnipeg office， you have a VPN server named Server3. On Server1， you configure a L2TP/IPSec demand-dial interface for each branch office. On each branch office server， you create a single demand-dial interface that uses L2TP/IPSec to connect to the main office. All demand-dial interfaces are configured to use a pre-shared key. You discover that only one branch office can connect to the main office at a time. You need to ensure that both branch offices can connect to the main office simultaneously.  What should you do？（）

单项选择题 Your company has a main office and one branch office. Your network consists of an Active Directory domain. You have a remote access server in the main office named Server1. You have a remote access server in Server2 has a demand-dial interface that connects to Server1.  The demand-dial interface connects by using a domain account named Ras1. You need to prevent Server2 from establishing new demand-dial connections to the main office between 18：00 and 08：00.  What should you do？（）

单项选择题 Your company consists of a single Active Directory domain that is configured in Windows 2000 native mode. All servers run Windows Server 2003 Service Pack 2 （SP2）.  You deploy a Routing and Remote Access server to provide VPN access to the network.You need to ensure that only members of a group named Sales can access the network through the VPN. The solution must minimize the administrative effort required to manage remote access.  What should you do？（）