Your network contains an Active Directory domain named contoso.com. The domain contains a server named
Server1. Server1 has the DHCP Server server role and the Network Policy Server role service installed.
Server1 contains three non-overlapping scopes namedScope1, Scope2, and Scope3. Server1 currently
provides the same Network Access Protection (NAP) settings to the three
scopes.
You modify the settings of Scope1 as shown in the exhibit. (Click the Exhibit button.)
You need to configure Server1 to provide unique NAPenforcement settings to the NAP non-compliant DHCP
clients from Scope1.
What should you create?
A.
A network policy that has the MS-Service Class condition
B.
A connection request policy that has the Service Type condition
C.
A network policy that has the Identity Type condition
D.
A connection request policy that has the IdentityType condition
Explanation:
MS-Service Class- Restricts the policy to clients that have received an IP address from a DHCP scope that
matches the specified DHCP profile name. This condition is used only when you are deploying NAP with the
DHCP enforcement method. To use the MS-Service Class attribute, in Specify the profile name that identifies
your DHCP scope, type the name of an existing DHCP profile.
http://technet.microsoft.com/en-us/library/cc731220(v=ws.10).aspx
http://technet.microsoft.com/en-us/library/cc731560(v=ws.10).aspx
Correct is: A
If you want to configure the MS-Service Class condition, click MS-Service Class, and then click Add. In Specify the profile name that identifies your DHCP scope, type the name of an existing DHCP profile, and then click Add.
The MS-Service Class condition restricts the policy to clients that have received an IP address from a DHCP scope that matches the specified DHCP profile name. This condition is used only when you are deploying NAP with the DHCP enforcement method.
https://technet.microsoft.com/en-us/library/cc731560(v=ws.10).aspx