Frage 1
Frage
Where is the default connection policy set to process all authentication requests?
Frage 2
Frage
Network policies determine what two important connectivity constraints?
Antworten
-
who is authorized to connect
-
the DHCP server for the connection
-
the DNS server for the connection
-
the connection circumstances for connectivity
Frage 3
Frage
When should you not use the command-line method of exporting and importing the NPS configuration?
Antworten
-
when the source NPS server and target NPS servers are on different IP subnets
-
when the source NPS database has a higher version number than the version number of destination NPS database
-
when the source NPS server and target NPS servers are different versions of Windows Server
-
when your network policy forbids the export of the NPS configuration
Frage 4
Frage
To which type of file do you export an NPS configuration?
Frage 5
Frage
When the Remote Access server finds an NPS network policy with conditions that match the incoming connection attempt, the server checks any _______________ that have been configured for the policy
Antworten
-
realms
-
constraints
-
options
-
permissions
Frage 6
Frage
Why would you set up a monitor-only NAP policy on your network?
Antworten
-
You don't want to force updates, which may include reboots, on client computers.
-
You are testing your NAP rollout before implementation
-
You want to track compliance but not enforce it
-
You are afraid that enforcement would violate privacy
Frage 7
Frage
Identify two remediation server types
Frage 8
Frage
What type of Active Directory domain controller is recommended to minimize security risks for remediation servers?
Antworten
-
Windows Server 2012
-
Windows Server 2008 R2
-
read-only
-
updated and compliant
Frage 9
Frage
Because NAP is provided by __________, you need to install _________ to install NAP.
Antworten
-
NPS, NPS
-
DNS, NPS
-
DHCP, NPS
-
AD, NPS
Frage 10
Frage
Which of the following is the strongest type of encryption?
Antworten
-
MPPE 40-Bit
-
MPPE 56-Bit
-
MPPE 128-Bit
-
No Encryption
Frage 11
Frage
Why do you need a web server as part of your NAP remediation infrastructure?
Antworten
-
to provide user information in case of a compliance failure
-
to provide Internet access to users who fail compliance
-
to redirect user requests for restored network access
-
to further assess how far out of compliance a user system is
Frage 12
Frage
Network Access Protection (NAP) is Microsoft's software for controlling network access of computers based on what?
Antworten
-
a computer's IP address and VLAN
-
a computer's overall health
-
a computer's Windows version
-
a computer's network functionality (role)
Frage 13
Frage
Where do you look to find out which computers are blocked and which are granted access via NAP?
Antworten
-
the local system's Event Viewer
-
the AD Event Viewer
-
the RADIUS Server Event Viewer
-
the NAP Server Event Viewer
Frage 14
Frage
Which two of the following are Routing and Remote Access IP settings?
Antworten
-
Server Must Request an IP Address
-
Client May Request an IP Address
-
Server Must Supply an IP Address
-
Client Must Supply an IP Adddress
Frage 15
Frage
An NPS policy is a set of permissions or restrictions that determine what three aspects of network connectivity?
Antworten
-
who, what, and where
-
who, when, and how
-
who, when, and where
-
who, how, and how long
Frage 16
Frage
Identify the correct NPS templates. Select all that apply.
Antworten
-
Shared Secrets
-
NPS FIlters
-
Health Policies
-
RADIUS Clients
Frage 17
Frage
Health policies are connected to what two other policies?
Frage 18
Frage
When you fully engage NAP for remediation enforcement, what mode do you place the policy in?
Antworten
-
enforcement
-
isolation
-
assessment
-
compliance
Frage 19
Frage
You should restrict access only for clients that don't have all available security updates installed if what situation exists?
Antworten
-
the computer are-running NAP
-
the computers are running SHA
-
the computers are running Windows Update
-
the computers are running anti-virus software
Frage 20
Frage
Network Access Policy is part of which larger scope NPS policy?
Antworten
-
connection request
-
network
-
Health
-
realm
Frage 21
Frage
What is the last setting in the Routing and Remote Access IP settings?
Antworten
-
the number of assigned IP addresses
-
which DHCP server will supply the request
-
which NPS server to connect to
-
how IP addresses are assigned
Frage 22
Frage
What command-line utility is used to import and export NPS templates?
Antworten
-
dnscmd
-
netsh
-
msconfig
-
net
Frage 23
Frage
Which Routing and Remote Access IP setting is the default setting?
Antworten
-
assign a static IP address
-
Server Settings Determine IP Address Assignment
-
server must connect to the assigned realm
-
client may request a specific DNS server
Frage 24
Frage
why is maintaining system health so important?
Antworten
-
for hardware and software upgrade purposes
-
to track and prevent system failures
-
to prevent illegal downloading
-
to maintain a safe computing environment
Frage 25
Frage
Why is there a No Encryption option for network connections?
Antworten
-
to accommodate devices (clients) that don't support encryption
-
to test connectivity before applying an encryption scheme
-
to allow for third-party encryption programs that might be incompatible with native encryption
-
to allow certain trusted connections to remain unencrypted
Frage 26
Frage
Which variable can be set to authorize or deny a remote connection?
Antworten
-
group membership
-
bandwidth limitations
-
corporate status
-
job role
Frage 27
Frage
To verify a NAP client's configuration, which command would you run?
Frage 28
Frage
What happens to a computer that isn't running Windows Firewall?
Frage 29
Frage
Which two components must a NAP client have enabled in order to use NAP?
Antworten
-
DHCP client
-
windows update
-
Security Center
-
NAP Agent
Frage 30
Frage
What is the purpose of the System Health Agent (SHA)?
Antworten
-
to provide feedback to the system for CPU, memory, and disk health
-
to provide feedback to the security health validator (SHV)
-
to provide feedback on the status of system protection and updates
-
to provide feedback on the overall critical performance to a central collector
Frage 31
Frage
When enabling NAP for DHCP scopes, how should you roll out the service?