You have a computer that runs Windows 7.
Your network contains a DHCP server that runs Windows Server 2008 R2.
The server is configured as a Network Access Protection (NAP) enforcement point.
You need to configure the computer as a NAP client.
Which two actions should you perform? (Each correct answer presents part of the solution. Choose
two.)
A.
From Services, set the Netlogon service Startup Type to Automatic.
B.
From Services, set the Network Access Protection Agent service Startup Type to Automatic.
C.
From the NAP Client Configuration console, configure the user interface settings.
D.
From the NAP Client Configuration console, enable the DHCP Quarantine Enforcement Client.
Explanation:
Network Access Protection
Network Access Protection (NAP) is a feature in Windows Server 2008 that controls access to
network resources based on a client computer’s identity and compliance with corporate governance
policy. NAP allows network administrators to define granular levels of network access based on who
a client is, the groups to which the client belongs, and the degree to which that client is compliant
with corporate governance policy. If a client is not compliant, NAP provides a mechanism to
automatically bring the client back into compliance and then dynamically increase its level of
network access.
NAP Client Configuration
Network Access Protection (NAP), a new feature in Windows Vista® and Windows Server® 2008,
allows you to control the access of client computers to network resources based on computer
identity and compliance with corporate governance policy. To implement NAP, you must configure
NAP settings on both servers and client computers. There are three tools that you can use to
configure NAP client settings: The NAP Client Configuration console provides a graphical user
interface with which you can configure NAP client settings on the local computer or in a
configuration file that you can save and apply to other computers. The Netsh commands for NAP
client provide a command-line tool that you can use to configure client computers or to create a
configuration file that you can save and apply to other computers. If you want to manage NAP client
settings on domain member client computers, you can use the Group Policy Management Console
and the Group Policy Management Editor. When you configure NAP client settings in Group Policy,
these settings are applied on NAP-capable domain member client computers when Group Policy is
refreshed.
To enable and disable the DHCP enforcement client by using the Windows interface
1. To open the NAP Client Configuration console, click Start, click All Programs, click Accessories, click
Run, type NAPCLCFG.MSC, and then click OK.
2. Click Enforcement Clients.
3. Right-click DHCP Enforcement Client, and then click Enable or Disable.
Network Access Protection Agent
The Network Access Protection (NAP) agent service collects and manages health information for
client computers on a network. Information collected by NAP agent is used to make sure that the
client computer has the required software and settings. If a client computer is not compliant with
health policy, it can be provided with restricted network access until its configuration is updated.
Depending on the configuration of health policy, client computers might be automatically updated
so that users quickly regain full network access without having to manually update their computer.