Your network contains an Active Directory domain named adatum.com. The domain contains a server named
Server1 that runs Windows Server 2012. Server1 is configured as a Network Policy Server (NPS) server and
as a DHCP server. You need to ensure that only computers that send a statement of health are checked for
Network Access Protection (NAP) health requirements. Which two settings should you configure? (Each
correct answer presents part of the solution. Choose two.)
A.
The Called Station ID constraints
B.
The MS-Service Class conditions
C.
The Health Policies conditions
D.
The NAS Port Type constraints
E.
The NAP-Capable Computers conditions
Confirmed. In this case, the Health Policies Conditions is actually condition of the Network Policy. It’s not the Health Policies.
http://technet.microsoft.com/en-us/library/cc731220(v=ws.10).aspx
NAP-Capable Computers
Restricts the policy to either clients that are capable of participating in NAP or clients that are not capable of participating in NAP. This capability is determined by whether the client sends a SoH to NPS.
Health Policies
Restricts the policy to clients that meet the health criteria specified in the health policy. For example, you might have two Health Policies that you have configured using the Windows SHV — one health policy created for circumstances where client computers pass all health checks and one policy created for circumstances where client computers fail all health checks specified in the Windows SHV. If you select the health policy that designates that all client computers must pass all health checks, the SoH sent to NPS from NAP agent on the client computer must state that the client passed all health checks required by the Windows SHV in order for the conditions of the network policy to be met