70-413 Exam Network Access Services 3

Question 1

Which NAP enforcement method requires clients to obtain a health certificate from the Health Registration Authority before being permitted to communicate with protected resources using IPsec?

Accepted Answer

IPsec enforcement

Answer

IPsec NAP enforcement requires compliant clients to possess a health certificate issued by the HRA; protected servers accept IPsec connections only from clients presenting a valid health certificate.

Question 2

What is the role of the Health Registration Authority (HRA) in a NAP with IPsec enforcement deployment?

Accepted Answer

To validate client health statements and issue health certificates to compliant clients

Answer

The HRA is an IIS-based component that receives health statements from NAP clients, forwards them to NPS for validation, and issues health certificates to clients that pass health checks.

Question 3

What is the primary function of a System Health Validator (SHV) in a NAP infrastructure?

Accepted Answer

To define the specific health requirements that NAP client computers must meet

Answer

An SHV is a plug-in component on NPS that defines and evaluates health requirements—such as firewall status, update level, or antivirus state—that a NAP client must satisfy to be deemed compliant.

Question 4

Which NAP enforcement method restricts non-compliant clients by assigning them a limited DHCP scope that only allows access to remediation servers?

Accepted Answer

DHCP enforcement

Answer

DHCP NAP enforcement integrates with the DHCP server to assign non-compliant clients a restricted IP configuration with limited routes, preventing access to production resources while allowing remediation.

Question 5

What is the primary function of Web Application Proxy (WAP) when deployed in Windows Server 2012 R2?

Accepted Answer

To publish internal web applications to external users and support AD FS pre-authentication

Answer

Web Application Proxy is a Remote Access role service that reverse-proxies internal web and application server URLs to external users, and can pre-authenticate requests using AD FS before passing them to back-end servers.

70-413 Exam Practice Test

70-413 Exam Practice Test

70-413 Exam Network Access Services 3