Your network contains an Active Directory domain named contoso.com. The domain
contains a server named Server1 that runs Windows Server 2012 R2 and has the Network
Policy Server role service installed.
You need to enable trace logging for Network Policy Server (NPS) on Server1.
Which tool should you use?

A.
The tracert.exe command

B.
The Network Policy Server console

C.
The Server Manager console

D.
The netsh.exe command

Explanation:
NPS trace logging files
You can use log files on servers running Network Policy Server (NPS) and NAP client
computers to help troubleshoot NAP problems. Log files can provide the detailed information
required for troubleshooting complex problems.
You can capture detailed information in log files on servers running NPS by enabling remote
access tracing. The Remote Access service does not need to be installed or running to use
remote access tracing. When you enable tracing on a server running NPS, several log files
are created in %windir%\tracing.
The following log files contain helpful information about NAP:
IASNAP. LOG: Contains detailed information about NAP processes, NPS authentication,
and NPS authorization.
IASSAM. LOG: Contains detailed information about user authentication and authorization.
Membership in the local Administrators group, or equivalent, is the minimum required to
enable tracing. Review details about using the appropriate accounts and group
memberships at Local and Domain Default Groups (http: //go. microsoft.
com/fwlink/?LinkId=83477).
To create tracing log files on a server running NPS
1. Open a command line as an administrator.
2. Type netshras set tr * en.
3. Reproduce the scenario that you are troubleshooting.
4. Type netshras set tr * dis.
5. Close the command prompt window.
http: //technet. microsoft. com/en-us/library/dd348461%28v=ws. 10%29. aspx