Your network contains an Active Directory domain named contoso.com. The domain contains a server named
Server1 that runs Windows Server 2012 R2. Server1 has the Network Policy Server role service installed.
You plan to configure Server1 as a Network Access Protection (NAP) health policy server for VPN enforcement
by using the Configure NAP wizard.
You need to ensure that you can configure the VPN enforcement method on Server1 successfully.
What should you install on Server1 before you run the Configure NAP wizard?
A.
A system health validator (SHV)
B.
The Host Credential Authorization Protocol (HCAP)
C.
A computer certificate
D.
The Remote Access server role
Explanation:
Configure NAP enforcement for VPN
This checklist provides the steps required to deploy computers with Routing and Remote Access Service
installed and configured as VPN servers with Network Policy Server (NPS) and Network Access Protection
(NAP).
Is this correct? You don’t need to cert for configen this realy you can use it but don’t need it…?
0
0
Shouldn’t the answer be D you need to install the Remote Access server role first to be able to use VPN then you can install the computer certificate.
0
0
https://technet.microsoft.com/en-us/library/dd125382(v=ws.10).aspx
0
0
The answer seems correct as according to the exam book the first 3 steps for VPN enforcement are:
1. Create a global security group in AD
2. Configure the NPS server as a RADIUS server fro VPN connections
3. Deploy a certificate of authority (CA)
1
0