MCTS 70-642 Network Access Protection (NAP) & Network Policy Server

Question 1

What is the primary purpose of Network Access Protection (NAP) in Windows Server 2008?

Accepted Answer

To enforce health policies and restrict network access for non-compliant computers

Answer

To encrypt all network traffic between clients and servers

Answer

To provide firewall protection at the network perimeter

Answer

To authenticate users before they can log on to the domain

Question 2

Which Windows Server 2008 server role must be installed to act as a NAP policy server?

Accepted Answer

Network Policy and Access Services (NPAS)

Answer

Active Directory Domain Services

Answer

Windows Deployment Services

Answer

Active Directory Certificate Services

Question 3

Which NAP component on the client computer collects and reports the client's health status to the server?

Accepted Answer

NAP Agent

Answer

System Health Validator (SHV)

Answer

NAP Enforcement Client (EC)

Answer

Health Registration Authority (HRA)

Question 4

What is a System Health Validator (SHV) in a NAP deployment?

Accepted Answer

A server-side component that evaluates the health reports submitted by clients

Answer

A client-side component that generates health certificates

Answer

A network switch that enforces 802.1X policies

Answer

A Group Policy object that configures NAP settings on clients

Question 5

Which NAP enforcement method uses IEEE 802.1X to restrict network access for non-compliant clients?

Accepted Answer

802.1X enforcement

Answer

DHCP enforcement

Answer

VPN enforcement

Answer

IPsec enforcement

Question 6

In a NAP deployment, what is the purpose of a Remediation Server?

Accepted Answer

To provide resources that help non-compliant clients become compliant

Answer

To issue health certificates to compliant clients

Answer

To log all NAP enforcement events to a central database

Answer

To act as the RADIUS proxy for remote access requests

Question 7

Which NAP enforcement method provides the strongest isolation because it uses cryptographic health certificates?

Accepted Answer

IPsec enforcement

Answer

DHCP enforcement

Answer

VPN enforcement

Answer

802.1X enforcement