HOTSPOT
Your network contains an Active Directory named contoso.com.
You have users named User1 and user2.
The Network Access Permission for User1 is set to Control access through NPS Network Policy. The
Network Access Permission for User2 is set to Allow access.
A policy named Policy1 is shown in the Policy1 exhibit. (Click the Exhibit button.)
A policy named Policy2 is shown in the Policy2 exhibit. (Click the Exhibit button.)
A policy named Policy3 is shown in the Policy3 exhibit. (Click the Exhibit button.)
For each of the following statements, select Yes if the statement is true. Otherwise, select No. Each
correct selection is worth one point.
Answer: 
Explanation:
On the Exam it changed to User2 Deny.
0
0
Pls explain.
Q1: User should not be able right, since its not allowing thursday?
Q2: If set to allow in AD, shouldn’t it bypass settings in NPS
Q3: Correct, as above.
0
0
Hello Dellster,
See with Q1 you said you wouldn’t be able as its not allowing Thursday but the third policy doesn’t have any time conditions so that would cover it as an allow permission.
I hope this helps I have me exam and hoping this question doesn’t crop up.
0
0
Sorry read question wrong on Q2.
0
0
Does User2 not even have to go through the policies since he/she is granted access, unlike User1 where it says he/she is granted controlled access through NPS? A little clarification, please.
0
0
1. Policy 1 won’t apply as it doesn’t have a condition for Thursday, so then policy 2 will be processed and that only affects Fridays, so then it will process policy 3 which allows any time, therefore user 1 can access on a Thursday.
2. Policy 1 only allows access Monday-Wednesday, so it will then process policy 2 which denies Friday, so user 1 can’t access on a Friday.
3. User 2 doesn’t use policies so is always allowed.
0
0
The “Grant access” permission does not make it so the user completely ignores policies.
It lets the user ignore only the “grant” policies.
if there is a policy that denies, and it applies to this user. they are STILL denied.
User 2 still uses Policies. it just doesnt use the “grant access” policies. It still uses the DENY policies.
In this case, User 2 would be denied access.
If in the exam, User 2 is set to “Deny” as sean stated, he would be Denied acess regardless of policies. so in both coses, User 2 is denied.
0
0