Your network contains an Active Directory domain named contoso.com. The domain
contains a server named Server1 that has the Remote Access server role installed.
DirectAccess is implemented on Server1 by using the default configuration.
You discover that DirectAccess clients do not use DirectAccess when accessing websites on
the Internet.
You need to ensure that DirectAccess clients access all Internet websites by using their
DirectAccess connection.
What should you do?
A.
Configure a DNS suffix search list on the DirectAccess clients.
B.
Enable the Route all traffic through the internal network policy setting in the DirectAccess
Server Settings Group Policy object (GPO).
C.
Configure DirectAccess to enable force tunneling.
D.
Disable the DirectAccess Passive Mode policy setting in the DirectAccess Client Settings
Group Policy object (GPO).
Answer is C
http://blogs.technet.com/b/meamcs/archive/2012/05/03/windows-server-2012-direct-access-part-1-what-s-new.aspx
By default only specific network traffic (defined by DNS records) will go through direct access tunnel. But if you want to route all traffic from client computer to the intranet resources over Direct Access tunnel, you can configure it with Force Tunneling.