Your network contains an Active Directory forest named northwindtraders.com.
The client computers in the finance department run either Windows 8.1, Windows 8, or Windows 7. All of the client computers in the marketing department run
Windows 8.1.
You need to design a Network Access Protection (NAP) solution for northwindtraders.com that meets the following requirements:
The client computers in the finance department that run Windows 7 must have a firewall enabled and the antivirus software must be up-to-date.
The finance computers that run Windows 8.1 or Windows 8 must have automatic updating enabled and the antivirus software must be up-to-date.
The client computers in the marketing department must have automatic updating enabled and the antivirus software must be up-to-date.
If a computer fails to meet its requirements, the computers must be provided access to a limited set of resources on the network.
If a computer meets its requirements, the computer must have full access to the network.
What is the minimum number of objects that you should create to meet the requirements? To answer, select the appropriate number for each object type in the
answer area
Hot Area:
Answer: 
For me 3,4,2. Yours opinions?
There are two different configurations to validate; a) computers that must have a firewall enabled and the antivirus software must be up-to-date and b) computers that must have automatic updating enabled and the antivirus software must be up-to-date. You therefore require two SHVs I believe.
Per SHV, you require two HPs, one HP corresponding to a compliant health state and one HP corresponding to a noncompliant health state. You therefore require four HPs I believe.
Last you need two NPs I believe, one to provide full access to the network and one to provide restricted access to the network, based on the above HPs.
So the correct answer would be 4, 2, 2 I believe.
4,4,2
Why would you need four NPs? Please elaborate.
The result for a client should be either full access to the network or restricted access to the network. You only need to create two NPs to realize that.
To answer my own question, you indeed require four NPs, as you cannot specify “or” conditions in a NP. Jalal Srour is correct therefore; the answer is 4, 4, 2.
Source: https://mizitechinfo.wordpress.com/2014/07/20/step-by-step-network-access-protection-nap-deployment-in-windows-server-2012-r2-part-3-of-7-configure-network-policies/