Your network contains an Active Directory domain named contoso.com. The domain contains a
server named Server1 that runs Windows Server 2012 R2. Server1 has the Network Policy Server
role service installed.
You plan to configure Server1 as a Network Access Protection (NAP) health policy server for VPN
enforcement by using the Configure NAP wizard.
You need to ensure that you can configure the VPN enforcement method on Server1 successfully.
What should you install on Server1 before you run the Configure NAP wizard?

HOTSPOT
Your network contains an Active Directory domain named contoso.com. The domain contains a
server named Server1 that runs Windows Server 2012 R2 and has the Network Policy Server role
service installed.
An administrator creates a Network Policy Server (NPS) network policy named Policy1. You need to
ensure that Policy1 applies to L2TP connections only.
Which condition should you modify?
To answer, select the appropriate object in the answer area.

HOTSPOT
Your company has four offices. The offices are located in Montreal, Seattle, Sydney, and New York.
The network contains an Active Directory domain named contoso.com. The domain contains a
server named Server2 that runs Windows Server 2012 R2. Server2 has the DHCP Server server role
installed.
All client computers obtain their IPv4 and IPv6 addresses from DHCP.
You need to ensure that Network Access Protection (NAP) enforcement for DHCP applies to all of the
client computers except for the client computers in the New York office.
Which two nodes should you configure? To answer, select the appropriate two nodes in the answer
area.

DRAG DROP
You have a server named Server1 that runs Windows Server 2012 R2. Server1 has the Network
Policy and Access Services server role installed.
All of the VPN servers on your network use Server1 for RADIUS authentication.
You create a security group named Group1.
You need to configure Network Policy and Access Services (NPAS) to meet the following
requirements:
Ensure that only the members of Group1 can establish a VPN connection to the VPN servers.

Allow only the members of Group1 to establish a VPN connection to the VPN servers if the members
are using client computers that run Windows 8 or later.
Which type of policy should you create for each requirement?
To answer, drag the appropriate policy types to the correct requirements. Each policy type may be
used once, more than once, or not at all. You may need to drag the split bar between panes or scroll
to view content.

Your network contains a single Active Directory domain named contoso.com. The domain contains a
member server named Server1 that runs Windows Server 2012 R2.
Server1 has the Windows Server updates Services server role installed and is configured to
download updates from the Microsoft Update servers.
You need to ensure that Server1 downloads express installation files from the Microsoft Update
servers.
What should you do from the Update Services console?

You have a server named Server1 that runs Windows Server 2012 R2. Server1 has the Remote
Access server role installed.
On Server1, you create a network policy named Policy1.
You need to configure Policy1 to ensure that users are added to a VLAN.
Which attributes should you add to Policy1?

Your network contains an Active Directory domain named contoso.com. The domain contains a
server named Server1 that runs Windows Server 2012 R2 and has the Network Policy Server role
service installed.
You need to enable trace logging for Network Policy Server (NPS) on Server1.
Which tool should you use?

Your network contains an Active Directory domain named contoso.com. The domain contains a
server named Server1. Server1 has the DHCP Server server role and the Network Policy Server role
service installed.
Server1 contains three non-overlapping scopes named Scope1, Scope2, and Scope3. Server1
currently provides the same Network Access Protection (NAP) settings to the three scopes.
You modify the settings of Scope1 as shown in the exhibit. (Click the Exhibit button.)

You need to configure Server1 to provide unique NAP enforcement settings to the NAP noncompliant DHCP clients from Scope1.
What should you create?

HOTSPOT
Your network contains an Active Directory domain named contoso.com. All client computers are
configured as DHCP clients.
You link a Group Policy object (GPO) named GPO1 to an organizational unit (OU) that contains all of
the client computer accounts.
You need to ensure that Network Access Protection (NAP) compliance is evaluated on all of the
client computers.
Which two settings should you configure in GPO1?
To answer, select the appropriate two settings in the answer area.

Your network contains a Network Policy Server (NPS) server named Server1. The network contains a
server named SQL1 that has Microsoft SQL Server 2008 R2 installed. All servers run Windows Server
2012 R2.
You configure NPS on Server1 to log accounting data to a database on SQL1.
You need to ensure that the accounting data is captured if SQL1 fails. The solution must minimize
cost.
What should you do?