MCTS 70-642 Network Access Protection (NAP) & Network Policy Server 3

Question 1

What is the primary function of Network Policy Server (NPS) in Windows Server 2008?

Accepted Answer

To provide centralized authentication, authorization, and accounting for network access

Answer

NPS is Microsoft's implementation of a RADIUS server, providing centralized AAA (authentication, authorization, and accounting) for VPN, wireless, and wired connections.

Question 2

When NPS is configured as a RADIUS proxy, what does it do with connection requests?

Accepted Answer

It forwards authentication requests to remote RADIUS servers based on connection request policies

Answer

As a RADIUS proxy, NPS forwards connection requests to remote RADIUS servers (configured in remote RADIUS server groups) rather than authenticating users itself.

Question 3

In NPS, what is the difference between a Connection Request Policy and a Network Policy?

Accepted Answer

Connection Request Policies determine where requests are processed; Network Policies determine whether access is granted

Answer

Connection Request Policies determine whether NPS processes requests locally or forwards them to a remote RADIUS server, while Network Policies specify the conditions and constraints for granting or denying access.

Question 4

Which EAP type is recommended for authenticating wireless clients using certificates in an NPS deployment?

Accepted Answer

EAP-TLS

Answer

EAP-TLS uses digital certificates for mutual authentication between the client and server, providing the strongest security for wireless network authentication.

Question 5

What NPS feature allows multiple RADIUS clients (such as VPN servers and wireless APs) to send requests to a single NPS server?

Accepted Answer

Centralized NPS with RADIUS clients configured on the NPS server

Answer

By configuring each network access server (VPN server, WAP, switch) as a RADIUS client on the central NPS server, all authentication requests can be processed centrally.

MCTS 70-642 Exam Practice Test

MCTS 70-642 Exam Practice Test

MCTS 70-642 Network Access Protection (NAP) & Network Policy Server 3