You are the systems administrator for your company. The company’s network consists of a single Active Directory domain. You install Windows Essential Business Server 2008 Premium Edition on the network.

The network contains a Windows Server 2008 computer configured as a Terminal Services Gateway (TS Gateway) server. Several remote users need to access resources located on the network. You want to create TS Connection Authorization Policies (TS CAPs) to specify users that can connect to Serverl. You want to create a central TS CAP store to store all the TS CAPs.

Which server should you use to do this?

A.
Remote Authentication Dial-In User Service (RADIUS)

B.
TS Gateway server

C.
Network Policy Server (NPS)

D.
Security Server

Explanation:
You should use a NPS server. TS Gateway is a role service in the Terminal Services server role in Windows Server 2008 that enables remote users to connect to resources located on a corporate network. After installing and configuring the TS Gateway, you must create TS CAPs and TS RAPs to ensure that TS Gateway functions correctly. TS CAPs are used to specify who can connect to a TS Gateway server. TS RAPs are used to specify internal network resources that can be accessed by remote users through a TS Gateway server. While configuring TS CAPs, you can specify a local TS CAP store or a central TS CAP store. The local TS CAP store contains TS CAPs that are stored on the TS Gateway server. A central TS CAP store contains TS CAPs that are stored on a central NPS server. By using a central NPS server for TS Gateway, you can centralize the storage, management, and validation of TS CAPs.

You should not use a RADIUS server because RADIUS server functions have been replaced by NPS in Windows Server 2008.

You should not use the TS Gateway server because a TS Gateway server can be configured as a local TS CAP store, not as a central TS CAP store.

You should not use the Security Server because the Security Server cannot be used as a central TS CAP store. The Security Server is used to configure security settings for your network, such as firewall and virtual private network (VPN) settings.