Your network contains an Active Directory domain named contoso.com. Network Access Protection (NAP) is
deployed to the domain.
You need to create NAP event trace log files on a client computer.
What should you run?
A.
logman
B.
Register-ObjectEvent
C.
tracert
D.
Register-EngineEvent
Explanation:
You can enable NAP client tracing by using the command line. On computers running Windows Vista®, you
can enable tracing by using the NAP Client Configuration console. NAP client tracing files are written in Event
Trace Log (ETL) format. These are binary files representing trace data that must be decoded by Microsoft
support personnel. Use the o option to specify the directory to which they are written. In the following example,
files are written to %systemroot%\\tracing\\nap. For more information, see Logman (http://go.microsoft.com/
fwlink/?LinkId=143549).
To create NAP event trace log files on a client computer
Open a command line as an administrator.
Type logman start QAgentRt -p {b0278a28-76f1-4e15-b1df-14b209a12613} 0xFFFFFFFF 9 -o %systemroot
%\\tracing\\nap\\QAgentRt. etl –ets. Note: To troubleshoot problems with WSHA, use the following GUID:
789e8f15-0cbf-4402-b0ed-0e22f90fdc8d.
Reproduce the scenario that you are troubleshooting.
Type logman stop QAgentRt -ets.
Close the command prompt window.http://technet.microsoft.com/en-us/library/dd348461%28v=ws.10%29.aspx