Your network contains an Active Directory domain named adatum.com. The domain contains a server named
Server1 that runs Windows Server 2012 R2. Server1 is configured as a Network Policy Server (NPS) server and
as a DHCP server.
You need to ensure that only computers that send a statement of health are checked for Network Access
Protection (NAP) health requirements.
Which two settings should you configure? (Each correct answer presents part of the solution. Choose two.)
A.
The Called Station ID constraints
B.
The MS-Service Class conditions
C.
The Health Policies conditions
D.
The NAS Port Type constraints
E.
The NAP-Capable Computers conditions
Explanation:
http://technet.microsoft.com/en-us/library/cc753603.aspx
http://technet.microsoft.com/en-us/library/cc731220(v=ws.10).aspx
http://technet.microsoft.com/en-us/library/cc731560.aspx
If you want to configure the NAP-capable Computers condition, click NAP-capable Computers, and then click Add. In Specify the computers required to match this policy, click either Only computers that are NAP-capable or Only computers that are not NAP-capable, and then click OK.
The NAP-capable Computers condition restricts the policy to either clients that are capable of participating in NAP or clients that are not capable of participating in NAP. This capability is determined by whether the client sends a statement of health (SoH) to NPS.
B and E.
https://msdn.microsoft.com/en-us/library/cc243463.aspx
no need to differ the DHCP scope!
provided answer is correct
the question mentions that it is also a dhcp but no dhcp enforcement