Questão 1
Questão
Where is the default connection policy set to process all authentication requests?
Questão 2
Questão
Network policies determine what two important connectivity constraints?
Responda
-
who is authorized to connect
-
the DHCP server for the connection
-
the DNS server for the connection
-
the connection circumstances for connectivity
Questão 3
Questão
When should you not use the command-line method of exporting and importing the NPS configuration?
Responda
-
when the source NPS server and target NPS servers are on different IP subnets
-
when the source NPS database has a higher version number than the version number of destination NPS database
-
when the source NPS server and target NPS servers are different versions of Windows Server
-
when your network policy forbids the export of the NPS configuration
Questão 4
Questão
To which type of file do you export an NPS configuration?
Questão 5
Questão
When the Remote Access server finds an NPS network policy with conditions that match the incoming connection attempt, the server checks any _______________ that have been configured for the policy
Responda
-
realms
-
constraints
-
options
-
permissions
Questão 6
Questão
Why would you set up a monitor-only NAP policy on your network?
Responda
-
You don't want to force updates, which may include reboots, on client computers.
-
You are testing your NAP rollout before implementation
-
You want to track compliance but not enforce it
-
You are afraid that enforcement would violate privacy
Questão 7
Questão
Identify two remediation server types
Questão 8
Questão
What type of Active Directory domain controller is recommended to minimize security risks for remediation servers?
Responda
-
Windows Server 2012
-
Windows Server 2008 R2
-
read-only
-
updated and compliant
Questão 9
Questão
Because NAP is provided by __________, you need to install _________ to install NAP.
Responda
-
NPS, NPS
-
DNS, NPS
-
DHCP, NPS
-
AD, NPS
Questão 10
Questão
Which of the following is the strongest type of encryption?
Responda
-
MPPE 40-Bit
-
MPPE 56-Bit
-
MPPE 128-Bit
-
No Encryption
Questão 11
Questão
Why do you need a web server as part of your NAP remediation infrastructure?
Responda
-
to provide user information in case of a compliance failure
-
to provide Internet access to users who fail compliance
-
to redirect user requests for restored network access
-
to further assess how far out of compliance a user system is
Questão 12
Questão
Network Access Protection (NAP) is Microsoft's software for controlling network access of computers based on what?
Responda
-
a computer's IP address and VLAN
-
a computer's overall health
-
a computer's Windows version
-
a computer's network functionality (role)
Questão 13
Questão
Where do you look to find out which computers are blocked and which are granted access via NAP?
Responda
-
the local system's Event Viewer
-
the AD Event Viewer
-
the RADIUS Server Event Viewer
-
the NAP Server Event Viewer
Questão 14
Questão
Which two of the following are Routing and Remote Access IP settings?
Responda
-
Server Must Request an IP Address
-
Client May Request an IP Address
-
Server Must Supply an IP Address
-
Client Must Supply an IP Adddress
Questão 15
Questão
An NPS policy is a set of permissions or restrictions that determine what three aspects of network connectivity?
Responda
-
who, what, and where
-
who, when, and how
-
who, when, and where
-
who, how, and how long
Questão 16
Questão
Identify the correct NPS templates. Select all that apply.
Responda
-
Shared Secrets
-
NPS FIlters
-
Health Policies
-
RADIUS Clients
Questão 17
Questão
Health policies are connected to what two other policies?
Questão 18
Questão
When you fully engage NAP for remediation enforcement, what mode do you place the policy in?
Responda
-
enforcement
-
isolation
-
assessment
-
compliance
Questão 19
Questão
You should restrict access only for clients that don't have all available security updates installed if what situation exists?
Responda
-
the computer are-running NAP
-
the computers are running SHA
-
the computers are running Windows Update
-
the computers are running anti-virus software
Questão 20
Questão
Network Access Policy is part of which larger scope NPS policy?
Responda
-
connection request
-
network
-
Health
-
realm
Questão 21
Questão
What is the last setting in the Routing and Remote Access IP settings?
Responda
-
the number of assigned IP addresses
-
which DHCP server will supply the request
-
which NPS server to connect to
-
how IP addresses are assigned
Questão 22
Questão
What command-line utility is used to import and export NPS templates?
Responda
-
dnscmd
-
netsh
-
msconfig
-
net
Questão 23
Questão
Which Routing and Remote Access IP setting is the default setting?
Responda
-
assign a static IP address
-
Server Settings Determine IP Address Assignment
-
server must connect to the assigned realm
-
client may request a specific DNS server
Questão 24
Questão
why is maintaining system health so important?
Responda
-
for hardware and software upgrade purposes
-
to track and prevent system failures
-
to prevent illegal downloading
-
to maintain a safe computing environment
Questão 25
Questão
Why is there a No Encryption option for network connections?
Responda
-
to accommodate devices (clients) that don't support encryption
-
to test connectivity before applying an encryption scheme
-
to allow for third-party encryption programs that might be incompatible with native encryption
-
to allow certain trusted connections to remain unencrypted
Questão 26
Questão
Which variable can be set to authorize or deny a remote connection?
Responda
-
group membership
-
bandwidth limitations
-
corporate status
-
job role
Questão 27
Questão
To verify a NAP client's configuration, which command would you run?
Questão 28
Questão
What happens to a computer that isn't running Windows Firewall?
Questão 29
Questão
Which two components must a NAP client have enabled in order to use NAP?
Responda
-
DHCP client
-
windows update
-
Security Center
-
NAP Agent
Questão 30
Questão
What is the purpose of the System Health Agent (SHA)?
Responda
-
to provide feedback to the system for CPU, memory, and disk health
-
to provide feedback to the security health validator (SHV)
-
to provide feedback on the status of system protection and updates
-
to provide feedback on the overall critical performance to a central collector
Questão 31
Questão
When enabling NAP for DHCP scopes, how should you roll out the service?