Your network has Network Access Protection (NAP) deployed. T

第1题：

Your company has Active Directory Certificate Services （AD CS） and Network Access Protection （NAP）  deployed on the network. You need to ensure that NAP policies are enforced on portable computers taht  use a wireless connection to access the network. What should you do？（）

• A、 Configure all access points to use 802.1X authentication
• B、 Configure all protable computers to use MS-CHAP v2 authentication
• C、 Use the Group Policy Management Console to access the wireless group policy settings， and enable the Prevent connections to ad-hoc networks option.
• D、 Use the Group Policy Management Console to access the wireless group policy settings， and disable the Prevent connections to infrastructure networks option.

第2题：

Your computer has a wired network adapter and a wireless network adapter. You use the wireless network adapter only when traveling.  You need to configure the network adapter profile settings to ensure that other systems are allowed to discover your computer only when you are at home.  What are two possible ways to achieve this goal？（）

• A、When you configure access to the wired network at home， set the wired network adapter location type to Private.
• B、When you configure access to the wired network at home， set the wired network adapter location type to Public.
• C、When you configure access to the public wireless access points， set the wireless network adapter location type to Private.
• D、When you configure access to the public wireless access points， set the wireless network adapter location type to Public.

第3题：

第4题：

Your network contains a single Active Directory domain. All domain controllers run Windows Server   2008 R2. There are 1，000 client computers that run Windows 7 and that are connected to managedswitches.   You need to recommend a strategy for network access that meets the following requirements：   èUsers are unable to bypass network access restrictions.   èOnly client computers that have up-to-date service packs installed can access the network.   èOnly client computers that have up-to-date anti-malware software installed can access the network.   What should you recommend？（）

• A、Implement Network Access Protection （NAP） that uses DHCP enforcement.
• B、Implement Network Access Protection （NAP） that uses 802.1x enforcement.
• C、Implement a Network Policy Server （NPS）， and enable IPsec on the domain controllers.
• D、Implement a Network Policy Server （NPS）， and enable Remote Authentication Dial-In User Service  （RADIUS） authentication on the managed switches.

第5题：

Your company has deployed Network Access Protection （NAP）.You configure secure wireless access to the network by using 802.1X authentication from any access point. You need to ensure that all client computers that access the network are evaluated by NAP.  What should you do？（）

• A、Configure all access points as RADIUS clients to the Remediation Servers.
• B、Configure all access points as RADIUS clients to the Network Policy Server （NPS）.
• C、Create a Network Policy that defines Remote Access Server as a network connection method.
• D、Create a Network Policy that specifies EAP-TLS as the only available authentication method.

第6题：

Your company's corporate network uses Network Access Protection (NAP).Users are able to connect to the corporate network remotely.You need to ensure that data transmissions between remote client computers and the corporate network are as secure as possible. What should you do?（）

• A、Apply an IPsec NAP policy.
• B、Configure a NAP policy for 802.1X wireless connections.
• C、Configure VPN connections to use MS-CHAP v2 authentication.
• D、Restrict Dynamic Host Configuration Protocol (DHCP) clients by using NAP.

第7题：

Network Access Protection (NAP) is configured for the corporate network.Users connect to the corporate network by using portable computers.The company policy requires confidentiality of data when the data is in transit between the portable computers and the servers.You need to ensure that users can access network resources only from computers that comply with the company policy.What should you do？（）

• A、Create an IPsec Enforcement Network policy.
• B、Create an 802.1X Enforcement Network policy.
• C、Create a Wired Network (IEEE 802.3) Group policy.
• D、Create an Extensible Authentication Protocol (EAP) Enforcement Network policy.

第8题：

第9题：

Your company has Active Directory Certificate Services （AD CS） and Network Access Protection （NAP） deployed on the network.You need to ensure that NAP policies are enforced on portable computers that use a wireless connection to access the network.  What should you do？（）

• A、Configure all access points to use 802.1X authentication.
• B、Configure all portable computers to use MS-CHAP v2 authentication.
• C、Use the Group Policy Management Console to access the wireless Group Policy settings， and enable the Prevent connections to ad-hoc networks option.
• D、Use the Group Policy Management Console to access the wireless Group Policy settings， and disable the Prevent connections to infrastructure networks option.

第10题：

Your network contains one Active Directory domain. You have a member server named Server1 that runs Windows Server 2008 R2. The server has the Routing and Remote Access Services role service installed.You implement Network Access Protection (NAP) for the domain.You need to configure the Point-to-Point Protocol (PPP) authentication method on Server1. Which authentication method should you use？（）

• A、Challenge Handshake Authentication Protocol (CHAP)
• B、Extensible Authentication Protocol (EAP)
• C、Microsoft Challenge Handshake Authentication Protocol version 2 (MS-CHAP v2)
• D、Password Authentication Protocol (PAP)