Your network contains an Active Directory domain named contoso.com. Network Access Protection
(NAP) is deployed to the domain.
You need to create NAP event trace log files on a client computer.
What should you run?

A.
logman

B.
Register-ObjectEvent

C.
tracert

D.
Register-EngineEvent

Explanation:

You can enable NAP client tracing by using the command line. On computers running Windows
Vista®, you can enable tracing by using the NAP Client Configuration console. NAP client tracing files
are written in Event Trace Log (ETL) format. These are binary files representing trace data that must
be decoded by Microsoft support personnel. Use the –o option to specify the directory to which they
are written. In the following example, files are written to %systemroot%\tracing\nap. For more
information, see Logman (http: //go. microsoft.com/fwlink/?LinkId=143549).
To create NAP event trace log files on a client computer
Open a command line as an administrator.
Type
logman start QAgentRt -p {b0278a28-76f1-4e15-b1df-14b209a12613} 0xFFFFFFFF 9 -o
%systemroot%\tracing\nap\QAgentRt. etl –ets.
Note: To troubleshoot problems with WSHA, use the following GUID: 789e8f15-0cbf-4402-b0ed-
0e22f90fdc8d.
Reproduce the scenario that you are troubleshooting.
Type logman stop QAgentRt -ets.
Close the command prompt window.
References:
httpHYPERLINK “http://technet.microsoft.com/en-us/library/dd348461(v=ws.10).aspx#_blank”:
//HYPERLINK “http://technet.microsoft.com/enus/library/dd348461(v=ws.10).aspx#_blank”technetHYPERLINK “http://technet.microsoft.com/enus/library/dd348461(v=ws.10).aspx#_blank”. microsoftHYPERLINK
“http://technet.microsoft.com/en-us/library/dd348461(v=ws.10).aspx#_blank”. com/enus/library/dd348461%28v=wsHYPERLINK “http://technet.microsoft.com/enus/library/dd348461(v=ws.10).aspx#_blank”. 10%29HYPERLINK “http://technet.microsoft.com/enus/library/dd348461(v=ws.10).aspx#_blank”. aspx