HOTSPOT
You have a server named Server1 that runs Windows Server 2012 R2.
You configure Network Access Protection (NAP) on Server1.
Your company implements a new security policy stating that all client computers must have
the latest updates installed. The company informs all employees that they have two weeks to
update their computer accordingly.
You need to ensure that if the client computers have automatic updating disabled, they are
provided with full access to the network until a specific date and time.
Which two nodes should you configure?
To answer, select the appropriate two nodes in the answer area.
Answer: 
Explanation:
I think you also need to create a Health Policey? So am confused, maybe the question actually asked to select 3 nodes. Isn’t “default configuration” for System “security health Validator” includes check updates is enabled. In which case you could go with defaults on and create Health policey to check that passes all SHV checks. And use that Health policey in Network policey. So in short my answer would be “Network Policies” and “Health Policies”
Agree, you Should first create Health validator->Create health police -> Create network police and chose the Health policy you created.
the answer should be or pick up three or health Validators & Health policy.
In the Network Policy you can create the Health Policy: When on the NP Wizard, Select Condition, scroll down to Health Policies, Add, you can select an existing Health Policy from the scrolldown menu, or select New and create a new Health Policy.
that still means you need to create a new health policy, but admittedly you don’t have to touch the “health policy” node.
i guess i just go with this answer.
Every site is listing the given answer as the correct one.
Occasionally answers on here are debatable and looking around elsewhere you will find other sites with differing answers, but not with this one…
I think the answer is as it says.
You must configure an SHV and a Network Policy Conditions, the “Policy Expiration” one
Policy Expiration
Specifies when the network policy expires; after the expiration date and time that you specify, the network policy is no longer evaluated by NPS. This condition is useful for circumstances where the network policy is designed with the NAP Enforcement setting that allows client computers full network access for a limited time. At the same time that the NAP Enforcement time setting expires, the network policy can also expire. In this circumstance, you should create a second network policy that enforces NAP after the expiration time of the first policy.
https://technet.microsoft.com/en-us/library/cc731220(v=ws.10).aspx
this question was asked in exam
network policies and system health validators
When you deploy NAP, health policy is added to the network policy configuration so that NPS performs client health checks during the authorization process.
https://technet.microsoft.com/en-us/library/cc772279(v=ws.10).aspx
I don’t agree with the answer.
If you modify the SHV and do not explicitly create a Health Policy (either compliant or noncompliant) you are unable to create a network policy using the SHV, since it is bound to the a health policy.
You would normally:
1) modify the settings of the SHV
2) create a health policy based on the SHV configured previously
3) create a network policy and under the conditions tab select the Health node and choose your health policy.
1. Create SHV
2. Create Network policies with a NAP condition: Heath Policies (create a new Health Policiy)
Create a new Health Policy in “New Network Policy Wizard”
https://i-msdn.sec.s-msft.com/dynimg/IC252326.gif