Your network contains an Active Directory domain named contoso.com. The domain
contains a server named Server1 that runs Windows Server 2012 R2. Server1 has the
Network Policy Server server role installed.
You need to allow connections that use 802.1x.
What should you create?

Your network contains an Active Directory domain named contoso.com. The domain
contains a server named Server1 that runs Windows Server 2012 R2. Server1 has the
Network Policy Server role service installed.

You plan to configure Server1 as a Network Access Protection (NAP) health policy server for
VPN enforcement by using the Configure NAP wizard.
You need to ensure that you can configure the VPN enforcement method on Server1
successfully.
What should you install on Server1 before you run the Configure NAP wizard?

HOTSPOT
Your network contains an Active Directory domain named contoso.com. The domain
contains a server named Server1 that runs Windows Server 2012 R2 and has the Network
Policy Server role service installed.
An administrator creates a Network Policy Server (NPS) network policy named Policy1. You
need to ensure that Policy1 applies to L2TP connections only.
Which condition should you modify?
To answer, select the appropriate object in the answer area.

HOTSPOT
Your company has four offices. The offices are located in Montreal, Seattle, Sydney, and
New York.
The network contains an Active Directory domain named contoso.com. The domain contains
a server named Server2 that runs Windows Server 2012 R2. Server2 has the DHCP Server
server role installed.
All client computers obtain their IPv4 and IPv6 addresses from DHCP.
You need to ensure that Network Access Protection (NAP) enforcement for DHCP applies to
all of the client computers except for the client computers in the New York office.
Which two nodes should you configure?
To answer, select the appropriate two nodes in the answer area.

DRAG DROP
You have a server named Server1 that runs Windows Server 2012 R2. Server1 has the
Network Policy and Access Services server role installed.
All of the VPN servers on your network use Server1 for RADIUS authentication.
You create a security group named Group1.

You need to configure Network Policy and Access Services (NPAS) to meet the following
requirements:
Ensure that only the members of Group1 can establish a VPN connection to the VPN
servers.
Allow only the members of Group1 to establish a VPN connection to the VPN servers if the
members are using client computers that run Windows 8 or later.
Which type of policy should you create for each requirement?
To answer, drag the appropriate policy types to the correct requirements. Each policy type
may be used once, more than once, or not at all. You may need to drag the split bar
between panes or scroll to view content.

Your network contains a single Active Directory domain named contoso.com. The domain
contains a member server named Server1 that runs Windows Server 2012 R2.

Server1 has the Windows Server updates Services server role installed and is configured to
download updates from the Microsoft Update servers.
You need to ensure that Server1 downloads express installation files from the Microsoft
Update servers.
What should you do from the Update Services console?

You have a server named Server1 that runs Windows Server 2012 R2. Server1 has the
Remote Access server role installed.
On Server1, you create a network policy named Policy1.
You need to configure Policy1 to ensure that users are added to a VLAN.
Which attributes should you add to Policy1?

Your network contains an Active Directory domain named contoso.com. The domain
contains a server named Server1 that runs Windows Server 2012 R2 and has the Network
Policy Server role service installed.
You need to enable trace logging for Network Policy Server (NPS) on Server1.
Which tool should you use?

Your network contains an Active Directory domain named contoso.com. The domain
contains a server named Server1. Server1 has the DHCP Server server role and the
Network Policy Server role service installed.
Server1 contains three non-overlapping scopes named Scope1, Scope2, and Scope3.
Server1 currently provides the same Network Access Protection (NAP) settings to the three
scopes.
You modify the settings of Scope1 as shown in the exhibit. (Click the Exhibit button.)

You need to configure Server1 to provide unique NAP enforcement settings to the NAP noncompliant DHCP clients from Scope1.
What should you create?

HOTSPOT

Your network contains an Active Directory domain named contoso.com. All client computers
are configured as DHCP clients.
You link a Group Policy object (GPO) named GPO1 to an organizational unit (OU) that
contains all of the client computer accounts.
You need to ensure that Network Access Protection (NAP) compliance is evaluated on all of
the client computers.
Which two settings should you configure in GPO1?
To answer, select the appropriate two settings in the answer area.