CHAPTER 14-c22

Which NAP enforcement method is considered the weakest due to its vulnerability to being bypassed by using static IP addresses?

• IPsec enforcement

• DHCP enforcement

• VPN enforcement

• RD Gateway enforcement

Answer explanation

DHCP enforcement can be bypassed if a client uses a static IP, making it the weakest method.

What is the role of health certificates in IPsec enforcement?

• They grant static IP addresses to compliant clients

• They identify RD Gateway users

• They validate client compliance to allow IPsec-secured communication

• They configure DHCP scopes for clients

Answer explanation

Health certificates are used to verify that clients meet health requirements before they can use IPsec-secured communication.

Which NAP enforcement method is most appropriate for restricting access from remote devices via the Internet?

• DHCP enforcement

• 802.1x enforcement

• IPsec enforcement

• RD Gateway enforcement

Answer explanation

RD Gateway enforcement restricts access to internal resources for remote users connecting over the Internet.

You are configuring NAP for remote VPN users. Which enforcement method should you apply to ensure noncompliant clients have limited access upon connection?

• 802.1x enforcement

• VPN enforcement

• DHCP enforcement

• IPsec enforcement

Answer explanation

VPN enforcement limits access based on health information presented during VPN connection attempts.

A company wants to ensure that only clients with health certificates can access sensitive internal servers using secure tunnels. What enforcement method should they implement?

• DHCP enforcement

• 802.1x enforcement

• IPsec enforcement
  
  

• RD Gateway enforcement

Answer explanation

IPsec enforcement uses health certificates to allow access only to compliant clients.

You are asked to apply a NAP method that works with network switches and wireless access points to enforce compliance. Which one should you choose?

• VPN enforcement

• RD Gateway enforcement

• 802.1x enforcement

• DHCP enforcement

Answer explanation

802.1x enforcement integrates with network infrastructure to control access.

What is the purpose of a System Statement of Health (SSoH) in the NAP connection process?

• It defines the health policies required by the NAP server

• It contains the combined output from SHVs

• It aggregates individual SoHs from SHAs for the NAP client

• It grants access to the remediation network

Answer explanation

The NAP client compiles multiple SoHs into a single SSoH before sending it to the health policy server.

A client machine updates its antivirus and becomes compliant. What occurs next in the NAP process?

• Nothing, the machine stays on the remediation network

• The machine manually requests access again

• The entire NAP connection process restarts automatically

• The client is required to contact a domain controller

Answer explanation

When a client’s health status changes, NAP re-initiates the health evaluation process.

Which NAP component is responsible for checking specific aspects of a client's health, such as antivirus status or firewall settings?

• NAP Agent

• System Health Agent (SHA)

• Health Policy Server

• Remediation Server

What is the purpose of the NAP Agent on a client computer?

• It stores health requirement policies.

• It blocks noncompliant clients from the network.

• It issues health certificates to clients.
  
  

• It collects and sends health reports from SHAs.

Answer explanation

The NAP Agent gathers health data from SHAs and sends a combined report (SSOH).