HOTSPOT
Your network contains an Active Directory domain named contoso.com. The domain
contains a server named Server1 that has the Network Policy Server server role installed.
The domain contains a server named Server2 that is configured for RADIUS accounting.
Server1 is configured as a VPN server and is configured to forward authentication requests
to Server2.
You need to ensure that only Server2 contains event information about authentication
requests from connections to Server1.
Which two nodes should you configure from the Network Policy Server console?
To answer, select the appropriate two nodes in the answer area.
Which two nodes should you configure from the Network Policy Server console?
HOTSPOT
Your network contains an Active Directory domain named contoso.com. The domain
contains a server named Server1 that has the Network Policy Server server role installed.
The domain contains a server named Server2 that is configured for RADIUS accounting.
Server1 is configured as a VPN server and is configured to forward authentication requests
to Server2.
You need to ensure that only Server2 contains event information about authentication
requests from connections to Server1.
Which two nodes should you configure from the Network Policy Server console?
To answer, select the appropriate two nodes in the answer area.
I may be wrong, but I think the “Accounting” node should be selected instead of the “Connection Request Policies” node.
You Right.
In NPS(Local) -> Properties you need to check log rejected & successful authentication requests.
http://technet.microsoft.com/en-us/library/cc731085%28v=ws.10%29.aspx
In Accounting menu we should configure what to log and to where, For example: Log Accounting requests.
http://technet.microsoft.com/en-US/library/cc754123.aspx
So the Answer should be : NPS(LOCAL) and Accounting
Accounting tab is to configure the accounting locally. You would need to do this on server2, not on server1.
The given answer is correct.
Actually the given answer is correct.
The key part of the question is “You need to ensure that ONLY server 2…”
Take a look at this snippet from a Microsoft article:
“If you want accounting information logged remotely but not locally, you must configure the local NPS server to not perform accounting, while also configuring accounting in a connection request policy to forward accounting data to a remote RADIUS server group.”
https://msdn.microsoft.com/en-us/library/cc753603.aspx
But the question says that server1 “is configured to forward authentication requests to Server2”, which means that strep already done…. so why again select “Connection Request Policy”?
Sorry, I take my words back, the gived answer is correct!
“is configured to forward authentication requests to Server2” – authentication!!! it doesn’t say “accounting”!!
We need to set the connection request policy also for forwarding accunting.
Yeah it does bro, look closer.
Mine says Connection Request Policies & NPS (local)
NPS local and Connection request policies
Heres the issue here. Are we on the nps console on server 1 or server 2. That makes all the difference and thats not clear
“…server named Server1 that has the Network Policy Server server role installed.”
So, SERVER1 console.
Main rule in MS questions is:”Don’t think out of a box! Work only with stuff that you’re being told and don’t presume anything!”.
It’s stupid, but it helps 🙂 .
Good Tip