Your network contains an Active Directory domain named contoso.com.Network Policy Server (NPS) is deployed to the domain.
You plan to deploy Network Access Protection (NAP).
You need to configure the requirements that are validated on the NPS client computers.
What should you do?

A.
From the Network Policy Server console, configure a health policy.

B.
From the Network Policy Server console, configure a network policy.

C.
From a Group Policy object (GPO), configure the NAP Client Configuration security setting.

D.
From a Group Policy object (GPO), configure the Network Access Protection Administrative Templates
setting.

E.
From the Network Policy Server console, configure a Windows Security Health Validator (WSHV) policy.

Explanation:
I feel the question is a bit unclear still.
http://technet.microsoft.com/en-us/library/cc731260.aspx
WSHV settings
If a client computer is noncompliant with one of the requirements of the WSHV, it is considered noncompliant
with the WSHV as a whole. If a computer is determined to be noncompliant with the WSHV, the following
actions might be taken:
I believe that the validation will take into account Health and Network, so it has to be both of them.
I don’t see A or D being a valid choice.
Leaving us with E. And, the site kinda confirm this.