Your network contains an Active Directory domain named contoso.com. The domain contains five servers. The servers are configured as shown in the following
table.
You plan to implement Network Access Protection (NAP) with IPSec enforcement on all client computers.
You need to identify on which servers you must perform the configurations for the NAP deployment.
Which servers should you identify? To answer, drag the appropriate servers to the correct actions. Each server may be used once, more than once, or not at all.
You may need to drag the split bar between panes or scroll to view content.)
Select and Place:
Answer: 
Explanation:
* Network Policy Server (Server3)
/ You configure remediation server groups on the Network Policy Server.
/ To create the System Health Validator health policies for just Configuration Manager, follow these procedures:
Load the Network Policy Server console.
Etc
* Domain Controller (Server1)
This feature is installed automatically on a domain controller running Windows Server 2008 and Windows Server 2008 R2. This feature can be installed on a
member server running Windows Server 2008 or Windows Server 2008 R2. You can use Group Policy to configure NAP settings on NAP clients running Windows
Server 2008, Windows Server 2008 R2, Windows Vista, Windows 7, and Windows XP SP3.