Your network contains an Active Directory domain named contoso.com.
Network Policy Server (NPS) is deployed to the domain.
You plan to deploy Network Access Protection (NAP).
You need to configure the requirements that are validated on the NPS client computers.
What should you do?
A.
From the Network Policy Server console, configure a network policy.
B.
From the Network Policy Server console, configure a health policy.
C.
From the Network Policy Server console, configure a Windows Security Health Validator
(WSHV) policy.
D.
From a Group Policy object (GPO), configure the NAP Client Configuration security
setting.
E.
From a Group Policy object (GPO), configure the Network Access Protection
Administrative Templates setting.
I’m doubting on this question:
B</b) Does not seem the answer, as a Health "policy" only checks some software things on the client (antivirus,firewall,updates).
On the other side A includes B because in the conditions of the Network Policy, you can add a Health Policy (as well as other things).
Any thoughts ?
The WSHV lists what items should be checked from compliance. This is what the question means by “requirements that are validated”.
After doing this you would then create a Health Policy, this is your compliance level e.g. Passes one or more SHV, Fails all SHV etc. Finally would then reference this in your Connection Request Policy\Network Policy.
NPS has the most questions in this exam. Do that many people really use this role at work?
The short answer is yes. Couple NPS with a WSUS remediation server and it helps tremendously with clients that have fallen out of Windows Updates scope.