Your role of Network Administrator at ABC.com includes the management of the Active Directory
Domain Services (AD DS) domain named ABC.com. All servers on the network run Windows
Server 2012.
You plan to enable external users to connect to the network using a VPN connection.
You are deploying Network Access Protection to ensure system health compliance for users that
connect over a VPN connection.
You install a Windows Server 2012 computer named ABC-NAP1 and install the Network Policy
Server role. You want to configure ABC-NAP1 as a Network Access Protection (NAP) health
policy server for the VPN connections.
You run the Configure NAP wizard to create a VPN Enforcement policy. However, you are unable
to complete the wizard.
How can you ensure that you are able to complete the Configure NAP wizard to configure VPN
Enforcement?

A.
Configure the IPSEC enforcement method first.

B.
Install a computer certificate on ABC-NAP1.

C.
Install a System Health Agent on ABC-NAP1.

D.
Install a System Health Validator on ABC-NAP1.