You need to ensure that data transmissions between remote client computers and the corporate network are as secure as possible
You need to ensure that Server1 can read the dial-in properties of the user accounts in the eu.contoso.com domain