You need to ensure that NAP meets the technical requirements.
Technical Requirements
The company identifies the following technical requirements:
– Minimize the amount of administrative effort whenever possible.
– Ensure that NAP with IPSec enforcement can be configured.
– Rename boston.litwareinc.com domain to bos.htwareinc.com.
– Migrate the DHCP servers from the physical servers to a virtual server that runs Windows Server 2012.
– Ensure that the members of the Operators groups in all three domains can manage the IPAM server from
their client computer.
Which role services should you install?

A.
Network Policy Server, Health Registration Authority and Host Credential Authorization Protocol

B.
Health Registration Authority, Host Credential Authorization Protocol and Online Responder

C.
Certification Authority, Network Policy Server and Health Registration Authority

D.
Online Responder, Certification Authority and Network Policy Server

Explanation:
Health Registration Authority
Applies To: Windows Server 2008 R2, Windows Server 2012 Health Registration Authority (HRA) is a
component of a Network Access Protection (NAP) infrastructure that plays a central role in NAP Internet
Protocol security (IPsec) enforcement. HRA obtains health certificates on behalf of NAP clients when they are
compliant with network health requirements. These health certificates authenticate NAP clients for IPsecprotected communications with other NAP clients on an intranet. If a NAP client does not have a health
certificate, the IPsec peer authentication fails and the NAP client cannot initiate communication withother
IPsec-protected computers on the network. HRA is installed on a computer that is also running Network Policy
Server (NPS) and Internet Information Services (IIS). If they are not already installed, these services will be
added when you install HRA.
http://technet.microsoft.com/en-us/library/cc732365.aspx