HOTSPOT
Your network contains an Active Directory domain named contoso.com. All client computers
are configured as DHCP clients.
You link a Group Policy object (GPO) named GPO1 to an organizational unit (OU) that
contains all of the client computer accounts.
You need to ensure that Network Access Protection (NAP) compliance is evaluated on all of
the client computers.
Which two settings should you configure in GPO1?
To answer, select the appropriate two settings in the answer area.
Answer: 
Explanation:
Why ? Can someone explain why system services ?
https://msdn.microsoft.com/en-us/library/dd314159%28v=ws.10%29.aspx
To ensure the Network Access Protection Agent service is started automatically in every client computer?
Exactly Mezz, to start the NAP agent automatically, as it says in the cumbersome article cited by B-Art.
I wonder why Microsoft chooses to say:
“Membership in the Domain Admins group, or equivalent, is the minimum required to complete this procedure”
instead of simply saying:
Must be a member of Domain Admins to apply the policy…. so much easy and direct!
“Is the minimum”, yes of course you are saying the minimum, anything more than that (like Enterprise Admin) would be overkill.
Microsoft : So many redundant words !
system services and network access protection
System Services and Network Access Protection (NAP)