MCTS 70-642 Network Access Protection (NAP) & Network Policy Server 2

Question 1

When NAP is deployed with DHCP enforcement, how are non-compliant clients restricted?

Accepted Answer

They receive an IP address with a restrictive subnet mask and routes that limit connectivity

Answer

They receive no IP address from the DHCP server

Answer

They are redirected to a captive portal for remediation

Answer

Their MAC addresses are blocked at the switch level

Question 2

Which component is required on the server side to issue health certificates to compliant clients in an IPsec NAP deployment?

Accepted Answer

Health Registration Authority (HRA)

Answer

Network Policy Server (NPS)

Answer

Routing and Remote Access Service (RRAS)

Answer

Active Directory Federation Services (AD FS)

Question 3

How should you configure client computers to enable NAP in a Windows Server 2008 domain environment?

Accepted Answer

Enable the NAP client through Group Policy settings

Answer

Manually install the NAP client software on each computer

Answer

Use Windows Deployment Services to push NAP agent configuration

Answer

Configure NAP client settings through the registry editor on each machine

Question 4

In a NAP with VPN enforcement scenario, which server role must be co-located with or connected to the NPS server?

Accepted Answer

Routing and Remote Access Service (RRAS)

Answer

Active Directory Domain Services

Answer

Active Directory Certificate Services

Answer

Windows Internet Name Service (WINS)

Question 5

What happens to a NAP client in 'monitor only' mode when it fails a health check?

Accepted Answer

The client receives full network access but the non-compliance is logged

Answer

The client is denied all network access immediately

Answer

The client is placed in the quarantine network

Answer

The client receives a warning dialog and must reboot

Question 6

Which NAP component determines what remediation actions a quarantined client should take?

Accepted Answer

System Health Validator (SHV)

Answer

NAP Administration Server

Answer

Quarantine Server

Answer

NAP Agent on the client

Question 7

Which protocol does NAP use to communicate health information between the NAP client and the NPS server over a RADIUS infrastructure?

Accepted Answer

Statement of Health (SoH) encapsulated in RADIUS attributes

Answer

SNMP

Answer

WMI over DCOM

Answer

LDAP over SSL