Question 1
Question
Where is the default connection policy set to process all authentication requests?
Question 2
Question
Network policies determine what two important connectivity constraints?
Answer
-
who is authorized to connect
-
the DHCP server for the connection
-
the DNS server for the connection
-
the connection circumstances for connectivity
Question 3
Question
When should you not use the command-line method of exporting and importing the NPS configuration?
Answer
-
when the source NPS server and target NPS servers are on different IP subnets
-
when the source NPS database has a higher version number than the version number of destination NPS database
-
when the source NPS server and target NPS servers are different versions of Windows Server
-
when your network policy forbids the export of the NPS configuration
Question 4
Question
To which type of file do you export an NPS configuration?
Question 5
Question
When the Remote Access server finds an NPS network policy with conditions that match the incoming connection attempt, the server checks any _______________ that have been configured for the policy
Answer
-
realms
-
constraints
-
options
-
permissions
Question 6
Question
Why would you set up a monitor-only NAP policy on your network?
Answer
-
You don't want to force updates, which may include reboots, on client computers.
-
You are testing your NAP rollout before implementation
-
You want to track compliance but not enforce it
-
You are afraid that enforcement would violate privacy
Question 7
Question
Identify two remediation server types
Question 8
Question
What type of Active Directory domain controller is recommended to minimize security risks for remediation servers?
Answer
-
Windows Server 2012
-
Windows Server 2008 R2
-
read-only
-
updated and compliant
Question 9
Question
Because NAP is provided by __________, you need to install _________ to install NAP.
Answer
-
NPS, NPS
-
DNS, NPS
-
DHCP, NPS
-
AD, NPS
Question 10
Question
Which of the following is the strongest type of encryption?
Answer
-
MPPE 40-Bit
-
MPPE 56-Bit
-
MPPE 128-Bit
-
No Encryption
Question 11
Question
Why do you need a web server as part of your NAP remediation infrastructure?
Answer
-
to provide user information in case of a compliance failure
-
to provide Internet access to users who fail compliance
-
to redirect user requests for restored network access
-
to further assess how far out of compliance a user system is
Question 12
Question
Network Access Protection (NAP) is Microsoft's software for controlling network access of computers based on what?
Answer
-
a computer's IP address and VLAN
-
a computer's overall health
-
a computer's Windows version
-
a computer's network functionality (role)
Question 13
Question
Where do you look to find out which computers are blocked and which are granted access via NAP?
Answer
-
the local system's Event Viewer
-
the AD Event Viewer
-
the RADIUS Server Event Viewer
-
the NAP Server Event Viewer
Question 14
Question
Which two of the following are Routing and Remote Access IP settings?
Answer
-
Server Must Request an IP Address
-
Client May Request an IP Address
-
Server Must Supply an IP Address
-
Client Must Supply an IP Adddress
Question 15
Question
An NPS policy is a set of permissions or restrictions that determine what three aspects of network connectivity?
Answer
-
who, what, and where
-
who, when, and how
-
who, when, and where
-
who, how, and how long
Question 16
Question
Identify the correct NPS templates. Select all that apply.
Answer
-
Shared Secrets
-
NPS FIlters
-
Health Policies
-
RADIUS Clients
Question 17
Question
Health policies are connected to what two other policies?
Question 18
Question
When you fully engage NAP for remediation enforcement, what mode do you place the policy in?
Answer
-
enforcement
-
isolation
-
assessment
-
compliance
Question 19
Question
You should restrict access only for clients that don't have all available security updates installed if what situation exists?
Answer
-
the computer are-running NAP
-
the computers are running SHA
-
the computers are running Windows Update
-
the computers are running anti-virus software
Question 20
Question
Network Access Policy is part of which larger scope NPS policy?
Answer
-
connection request
-
network
-
Health
-
realm
Question 21
Question
What is the last setting in the Routing and Remote Access IP settings?
Answer
-
the number of assigned IP addresses
-
which DHCP server will supply the request
-
which NPS server to connect to
-
how IP addresses are assigned
Question 22
Question
What command-line utility is used to import and export NPS templates?
Answer
-
dnscmd
-
netsh
-
msconfig
-
net
Question 23
Question
Which Routing and Remote Access IP setting is the default setting?
Answer
-
assign a static IP address
-
Server Settings Determine IP Address Assignment
-
server must connect to the assigned realm
-
client may request a specific DNS server
Question 24
Question
why is maintaining system health so important?
Answer
-
for hardware and software upgrade purposes
-
to track and prevent system failures
-
to prevent illegal downloading
-
to maintain a safe computing environment
Question 25
Question
Why is there a No Encryption option for network connections?
Answer
-
to accommodate devices (clients) that don't support encryption
-
to test connectivity before applying an encryption scheme
-
to allow for third-party encryption programs that might be incompatible with native encryption
-
to allow certain trusted connections to remain unencrypted
Question 26
Question
Which variable can be set to authorize or deny a remote connection?
Answer
-
group membership
-
bandwidth limitations
-
corporate status
-
job role
Question 27
Question
To verify a NAP client's configuration, which command would you run?
Question 28
Question
What happens to a computer that isn't running Windows Firewall?
Question 29
Question
Which two components must a NAP client have enabled in order to use NAP?
Answer
-
DHCP client
-
windows update
-
Security Center
-
NAP Agent
Question 30
Question
What is the purpose of the System Health Agent (SHA)?
Answer
-
to provide feedback to the system for CPU, memory, and disk health
-
to provide feedback to the security health validator (SHV)
-
to provide feedback on the status of system protection and updates
-
to provide feedback on the overall critical performance to a central collector
Question 31
Question
When enabling NAP for DHCP scopes, how should you roll out the service?