Michael Marcus
Quiz by , created more than 1 year ago

70-411 Final College Exam

739
1
0
Michael Marcus
Created by Michael Marcus over 8 years ago
Close

Quiz 13 & 14

Question 1 of 31

1

Where is the default connection policy set to process all authentication requests?

Select one of the following:

  • on the domain controller

  • at the RADIUS proxy server

  • locally

  • in a separate database

Explanation

Question 2 of 31

1

Network policies determine what two important connectivity constraints?

Select one or more of the following:

  • who is authorized to connect

  • the DHCP server for the connection

  • the DNS server for the connection

  • the connection circumstances for connectivity

Explanation

Question 3 of 31

1

When should you not use the command-line method of exporting and importing the NPS configuration?

Select one of the following:

  • when the source NPS server and target NPS servers are on different IP subnets

  • when the source NPS database has a higher version number than the version number of destination NPS database

  • when the source NPS server and target NPS servers are different versions of Windows Server

  • when your network policy forbids the export of the NPS configuration

Explanation

Question 4 of 31

1

To which type of file do you export an NPS configuration?

Select one of the following:

  • TXT

  • DOC

  • XML

  • NPS

Explanation

Question 5 of 31

1

When the Remote Access server finds an NPS network policy with conditions that match the incoming connection attempt, the server checks any _______________ that have been configured for the policy

Select one of the following:

  • realms

  • constraints

  • options

  • permissions

Explanation

Question 6 of 31

1

Why would you set up a monitor-only NAP policy on your network?

Select one of the following:

  • You don't want to force updates, which may include reboots, on client computers.

  • You are testing your NAP rollout before implementation

  • You want to track compliance but not enforce it

  • You are afraid that enforcement would violate privacy

Explanation

Question 7 of 31

1

Identify two remediation server types

Select one or more of the following:

  • Anti-virus/anti-malware servers

  • Software update server

  • Terminal servers

  • RRAS servers

Explanation

Question 8 of 31

1

What type of Active Directory domain controller is recommended to minimize security risks for remediation servers?

Select one of the following:

  • Windows Server 2012

  • Windows Server 2008 R2

  • read-only

  • updated and compliant

Explanation

Question 9 of 31

1

Because NAP is provided by __________, you need to install _________ to install NAP.

Select one of the following:

  • NPS, NPS

  • DNS, NPS

  • DHCP, NPS

  • AD, NPS

Explanation

Question 10 of 31

1

Which of the following is the strongest type of encryption?

Select one of the following:

  • MPPE 40-Bit

  • MPPE 56-Bit

  • MPPE 128-Bit

  • No Encryption

Explanation

Question 11 of 31

1

Why do you need a web server as part of your NAP remediation infrastructure?

Select one of the following:

  • to provide user information in case of a compliance failure

  • to provide Internet access to users who fail compliance

  • to redirect user requests for restored network access

  • to further assess how far out of compliance a user system is

Explanation

Question 12 of 31

1

Network Access Protection (NAP) is Microsoft's software for controlling network access of computers based on what?

Select one of the following:

  • a computer's IP address and VLAN

  • a computer's overall health

  • a computer's Windows version

  • a computer's network functionality (role)

Explanation

Question 13 of 31

1

Where do you look to find out which computers are blocked and which are granted access via NAP?

Select one of the following:

  • the local system's Event Viewer

  • the AD Event Viewer

  • the RADIUS Server Event Viewer

  • the NAP Server Event Viewer

Explanation

Question 14 of 31

1

Which two of the following are Routing and Remote Access IP settings?

Select one or more of the following:

  • Server Must Request an IP Address

  • Client May Request an IP Address

  • Server Must Supply an IP Address

  • Client Must Supply an IP Adddress

Explanation

Question 15 of 31

1

An NPS policy is a set of permissions or restrictions that determine what three aspects of network connectivity?

Select one of the following:

  • who, what, and where

  • who, when, and how

  • who, when, and where

  • who, how, and how long

Explanation

Question 16 of 31

1

Identify the correct NPS templates. Select all that apply.

Select one or more of the following:

  • Shared Secrets

  • NPS FIlters

  • Health Policies

  • RADIUS Clients

Explanation

Question 17 of 31

1

Health policies are connected to what two other policies?

Select one or more of the following:

  • compliance policies

  • network policies

  • connection request policies

  • performance policies

Explanation

Question 18 of 31

1

When you fully engage NAP for remediation enforcement, what mode do you place the policy in?

Select one of the following:

  • enforcement

  • isolation

  • assessment

  • compliance

Explanation

Question 19 of 31

1

You should restrict access only for clients that don't have all available security updates installed if what situation exists?

Select one of the following:

  • the computer are-running NAP

  • the computers are running SHA

  • the computers are running Windows Update

  • the computers are running anti-virus software

Explanation

Question 20 of 31

1

Network Access Policy is part of which larger scope NPS policy?

Select one of the following:

  • connection request

  • network

  • Health

  • realm

Explanation

Question 21 of 31

1

What is the last setting in the Routing and Remote Access IP settings?

Select one of the following:

  • the number of assigned IP addresses

  • which DHCP server will supply the request

  • which NPS server to connect to

  • how IP addresses are assigned

Explanation

Question 22 of 31

1

What command-line utility is used to import and export NPS templates?

Select one of the following:

  • dnscmd

  • netsh

  • msconfig

  • net

Explanation

Question 23 of 31

1

Which Routing and Remote Access IP setting is the default setting?

Select one of the following:

  • assign a static IP address

  • Server Settings Determine IP Address Assignment

  • server must connect to the assigned realm

  • client may request a specific DNS server

Explanation

Question 24 of 31

1

why is maintaining system health so important?

Select one of the following:

  • for hardware and software upgrade purposes

  • to track and prevent system failures

  • to prevent illegal downloading

  • to maintain a safe computing environment

Explanation

Question 25 of 31

1

Why is there a No Encryption option for network connections?

Select one of the following:

  • to accommodate devices (clients) that don't support encryption

  • to test connectivity before applying an encryption scheme

  • to allow for third-party encryption programs that might be incompatible with native encryption

  • to allow certain trusted connections to remain unencrypted

Explanation

Question 26 of 31

1

Which variable can be set to authorize or deny a remote connection?

Select one of the following:

  • group membership

  • bandwidth limitations

  • corporate status

  • job role

Explanation

Question 27 of 31

1

To verify a NAP client's configuration, which command would you run?

Select one of the following:

  • netsh nap show state

  • netsh nap client show state

  • netsh nps nap show state

  • netsh nps nap agent state

Explanation

Question 28 of 31

1

What happens to a computer that isn't running Windows Firewall?

Select one of the following:

  • The computer is isolated

  • the computer is powered off

  • a server message is sent to the computer

  • an event is logged

Explanation

Question 29 of 31

1

Which two components must a NAP client have enabled in order to use NAP?

Select one or more of the following:

  • DHCP client

  • windows update

  • Security Center

  • NAP Agent

Explanation

Question 30 of 31

1

What is the purpose of the System Health Agent (SHA)?

Select one of the following:

  • to provide feedback to the system for CPU, memory, and disk health

  • to provide feedback to the security health validator (SHV)

  • to provide feedback on the status of system protection and updates

  • to provide feedback on the overall critical performance to a central collector

Explanation

Question 31 of 31

1

When enabling NAP for DHCP scopes, how should you roll out the service?

Select one of the following:

  • all at once

  • on test systems only

  • for individual DHCP scopes

  • for individual computers

Explanation