Your network contains an Active Directory domain named contoso.com. Network Access
Protection (NAP) is deployed to the domain.
You need to create NAP event trace log files on a client computer.
What should you run?

A.
logman

B.
Register-ObjectEvent

C.
tracert

D.
Register-EngineEvent

Explanation:
You can enable NAP client tracing by using the command line. On computers running
Windows Vista®, you can enable tracing by using the NAP Client Configuration console.
NAP client tracing files are written in Event Trace Log (ETL) format. These are binary files
representing trace data that must be decoded by Microsoft support personnel. Use the –o
option to specify the directory to which they are written. In the following example, files are

written to %systemroot%\tracing\nap. For more information, see Logman (http: //go.
microsoft.com/fwlink/?LinkId=143549).
To create NAP event trace log files on a client computer
1. Open a command line as an administrator.
2. Type logman start QAgentRt -p {b0278a28-76f1 -4e15-b1df-14b209a12613} 0xFFFFFFFF 9 -o
%systemroot%\tracing\nap\QAgentRt. etl –ets.
Note: To troubleshoot problems with WSHA, use the following GUID: 789e8f15-0cbf-4402-
b0ed-0e22f90fdc8d.
3. Reproduce the scenario that you are troubleshooting.
4. Type logman stop QAgentRt -ets.
5. Close the command prompt window.
http: //technet. microsoft. com/en-us/library/dd348461%28v=ws. 10%29. aspx