Pregunta 1
Pregunta
Where is the default connection policy set to process all authentication requests?
Pregunta 2
Pregunta
Network policies determine what two important connectivity constraints?
Respuesta
-
who is authorized to connect
-
the DHCP server for the connection
-
the DNS server for the connection
-
the connection circumstances for connectivity
Pregunta 3
Pregunta
When should you not use the command-line method of exporting and importing the NPS configuration?
Respuesta
-
when the source NPS server and target NPS servers are on different IP subnets
-
when the source NPS database has a higher version number than the version number of destination NPS database
-
when the source NPS server and target NPS servers are different versions of Windows Server
-
when your network policy forbids the export of the NPS configuration
Pregunta 4
Pregunta
To which type of file do you export an NPS configuration?
Pregunta 5
Pregunta
When the Remote Access server finds an NPS network policy with conditions that match the incoming connection attempt, the server checks any _______________ that have been configured for the policy
Respuesta
-
realms
-
constraints
-
options
-
permissions
Pregunta 6
Pregunta
Why would you set up a monitor-only NAP policy on your network?
Respuesta
-
You don't want to force updates, which may include reboots, on client computers.
-
You are testing your NAP rollout before implementation
-
You want to track compliance but not enforce it
-
You are afraid that enforcement would violate privacy
Pregunta 7
Pregunta
Identify two remediation server types
Pregunta 8
Pregunta
What type of Active Directory domain controller is recommended to minimize security risks for remediation servers?
Respuesta
-
Windows Server 2012
-
Windows Server 2008 R2
-
read-only
-
updated and compliant
Pregunta 9
Pregunta
Because NAP is provided by __________, you need to install _________ to install NAP.
Respuesta
-
NPS, NPS
-
DNS, NPS
-
DHCP, NPS
-
AD, NPS
Pregunta 10
Pregunta
Which of the following is the strongest type of encryption?
Respuesta
-
MPPE 40-Bit
-
MPPE 56-Bit
-
MPPE 128-Bit
-
No Encryption
Pregunta 11
Pregunta
Why do you need a web server as part of your NAP remediation infrastructure?
Respuesta
-
to provide user information in case of a compliance failure
-
to provide Internet access to users who fail compliance
-
to redirect user requests for restored network access
-
to further assess how far out of compliance a user system is
Pregunta 12
Pregunta
Network Access Protection (NAP) is Microsoft's software for controlling network access of computers based on what?
Respuesta
-
a computer's IP address and VLAN
-
a computer's overall health
-
a computer's Windows version
-
a computer's network functionality (role)
Pregunta 13
Pregunta
Where do you look to find out which computers are blocked and which are granted access via NAP?
Respuesta
-
the local system's Event Viewer
-
the AD Event Viewer
-
the RADIUS Server Event Viewer
-
the NAP Server Event Viewer
Pregunta 14
Pregunta
Which two of the following are Routing and Remote Access IP settings?
Respuesta
-
Server Must Request an IP Address
-
Client May Request an IP Address
-
Server Must Supply an IP Address
-
Client Must Supply an IP Adddress
Pregunta 15
Pregunta
An NPS policy is a set of permissions or restrictions that determine what three aspects of network connectivity?
Respuesta
-
who, what, and where
-
who, when, and how
-
who, when, and where
-
who, how, and how long
Pregunta 16
Pregunta
Identify the correct NPS templates. Select all that apply.
Respuesta
-
Shared Secrets
-
NPS FIlters
-
Health Policies
-
RADIUS Clients
Pregunta 17
Pregunta
Health policies are connected to what two other policies?
Pregunta 18
Pregunta
When you fully engage NAP for remediation enforcement, what mode do you place the policy in?
Respuesta
-
enforcement
-
isolation
-
assessment
-
compliance
Pregunta 19
Pregunta
You should restrict access only for clients that don't have all available security updates installed if what situation exists?
Respuesta
-
the computer are-running NAP
-
the computers are running SHA
-
the computers are running Windows Update
-
the computers are running anti-virus software
Pregunta 20
Pregunta
Network Access Policy is part of which larger scope NPS policy?
Respuesta
-
connection request
-
network
-
Health
-
realm
Pregunta 21
Pregunta
What is the last setting in the Routing and Remote Access IP settings?
Respuesta
-
the number of assigned IP addresses
-
which DHCP server will supply the request
-
which NPS server to connect to
-
how IP addresses are assigned
Pregunta 22
Pregunta
What command-line utility is used to import and export NPS templates?
Respuesta
-
dnscmd
-
netsh
-
msconfig
-
net
Pregunta 23
Pregunta
Which Routing and Remote Access IP setting is the default setting?
Respuesta
-
assign a static IP address
-
Server Settings Determine IP Address Assignment
-
server must connect to the assigned realm
-
client may request a specific DNS server
Pregunta 24
Pregunta
why is maintaining system health so important?
Respuesta
-
for hardware and software upgrade purposes
-
to track and prevent system failures
-
to prevent illegal downloading
-
to maintain a safe computing environment
Pregunta 25
Pregunta
Why is there a No Encryption option for network connections?
Respuesta
-
to accommodate devices (clients) that don't support encryption
-
to test connectivity before applying an encryption scheme
-
to allow for third-party encryption programs that might be incompatible with native encryption
-
to allow certain trusted connections to remain unencrypted
Pregunta 26
Pregunta
Which variable can be set to authorize or deny a remote connection?
Respuesta
-
group membership
-
bandwidth limitations
-
corporate status
-
job role
Pregunta 27
Pregunta
To verify a NAP client's configuration, which command would you run?
Pregunta 28
Pregunta
What happens to a computer that isn't running Windows Firewall?
Pregunta 29
Pregunta
Which two components must a NAP client have enabled in order to use NAP?
Respuesta
-
DHCP client
-
windows update
-
Security Center
-
NAP Agent
Pregunta 30
Pregunta
What is the purpose of the System Health Agent (SHA)?
Respuesta
-
to provide feedback to the system for CPU, memory, and disk health
-
to provide feedback to the security health validator (SHV)
-
to provide feedback on the status of system protection and updates
-
to provide feedback on the overall critical performance to a central collector
Pregunta 31
Pregunta
When enabling NAP for DHCP scopes, how should you roll out the service?