Your network contains an Active Directory forest named contoso.com. The forest contains a server
named Server1 that is configured as an enterprise certification authority (CA). The forest contains a
server named Server2 that has the Network Policy Server (NPS) role service installed. You deploy
Network Access Protection (NAP). You discover that Server1 fails to issue health certificates. You
need to ensure that health certificates can be issued. What should you do?
A.
Install an additional server, configure the new server as a standalone CA, and then configure the
Health Registration Authority (HRA) to use the CA.
B.
From the Network Policy Server console, create a new health policy.
C.
From the Network Policy Server console, modify the Windows System Health Validators settings.
D.
Install the Host Credential Authorization Protocol (HCAP) role service on Server1.