Your company has an Active Directory domain.
A server named Server2 runs Windows Server 2008 R2.
All client computers run Windows 7.
You install the Remote Desktop Services server role, RD Web Access role service, and RD Gateway role service on Server2.
You need to ensure that all client computers have compliant firewall, antivirus software, and antispyware.

Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)

A.
Configure Network Access Protection (NAP) on a server in the domain.

B.
Add the Remote Desktop Services servers to the Windows Authorization Access domain local security group.

C.
Add the Remote Desktop Services client computers to the Windows Authorization Access domain local security group.

D.
Enable the Request clients to send a statement of health option in the Remote Desktop client access policy.

Explanation:
Health requirement policies on the NAP health policy server determine whether a NAP-capable client is compliant or noncompliant, how to treat noncompliant NAP clients and whether they should automatically remediate their health state, and how to treat non-NAP-capable clients for different NAP enforcement methods. A health requirement policy is a combination of a connection request policy, a health policy, Network Access Protection settings, and a network policy.

Source: http://www.microsoft.com/downloads/en/details.aspx?FamilyID=8e47649e-962c-42f8-9e6f-21c5ccdcf490&displaylang=en