Chapter 5

1.

1 point

1. Network Access Protection (NAP) is Microsoft’s software for controlling network access of computers based on what?

a. a computer’s IP address and VLAN

b. a computer’s overall health

c. a computer’s Windows version

d. a computer’s network functionality (role)

2.

1 point

2. Because NAP is provided by _________, you need to install _________ to install NAP.

a. NPS, NPS

b. DNS, NPS

c. DHCP, NPS

d. AD, NPS

3.

1 point

3. DHCP enforcement is not available for what kind of clients?

a. mobile

b. remote dial-up

c. noncompliant

d. IPv6

4.

1 point

4. Identify two remediation server types.

a. Anti-virus/anti-malware servers

b. Software update servers

c. Terminal servers

d. RRAS servers

5.

1 point

5. What type of Active Directory domain controller is recommended to minimize security risks for remediation servers?

a. Windows Server 2012

b. Windows Server 2008 R2

c. read-only

d. updated and compliant

6.

1 point

6. When you fully engage NAP for remediation enforcement, what mode do you place the policy in?

a. enforcement

b. isolation

c. assessment

d. compliance

7.

1 point

7. To verify a NAP client’s configuration, which command would you run?

a. netsh nap show state

b. netsh nap client show state

c. netsh nps nap show state

d. netsh nps nap agent state

8.

1 point

8. Which two components must a NAP client have enabled in order to use NAP?

a. DHCP client

b. Windows Update

c. Security Center

d. NAP Agent

9.

1 point

9. Why do you need a web server as part of your NAP remediation infrastructure?

a. to provide user information in case of a compliance failure

b. to provide Internet access to users who fail compliance

c. to redirect user requests for restored network access

d. to further assess how far out of compliance a user system is

10.

1 point

10. Where do you look to find out which computers are blocked and which are granted access via NAP?

a. the local system’s Event Viewer

b. the AD Event Viewer

c. the RADIUS Server Event Viewer

d. the NAP Server Event Viewer

11.

1 point

11. Health policies are in pairs. What are the members of the pair? Select two.

a. NAP-compliant

b. NAP-remedial

c. NAP-noncompliant

d. NAP-quarantined

12.

1 point

12. You should restrict access only for clients that don’t have all available security updates installed if what situation exists?

a. the computers are running NAP

b. the computers are running SHA

c. the computers are running Windows Update

d. the computers are running anti-virus software

13.

1 point

13. What happens to a computer that isn’t running Windows Firewall?

a. The computer is isolated.

b. The computer is powered off.

c. A server message is sent to the computer.

d. An event is logged.

14.

1 point

14. Health policies are connected to what two other policies?

a. compliance policies

b. network policies

c. connection request policies

d. performance policies

15.

1 point

15. To use the NAP-compliant policy, the client must do what?

a. pass 75% of the SHV checks

b. fail no more than 10% of the SHV checks

c. pass one of the SHV checks

d. pass all SHV checks

16.

1 point

16. Which computers are not affected by VPN enforcement?

a. newly deployed computers

b. computers that access the LAN remotely

c. isolated computers

d. locally connected computers