Which one of the these tools we don't use to configure the NPS role ?

In order to enable security center on NAP capable clients, you can use -

There are computers or network-access devices that use NAP or that you can use with NAP to enable a health assessment of a NAP client before granting restricted network access or contact.

These are computers that run Windows Server 2012 and the NPS service, and that store health-requirement policies and provide health-state validation for NAP.

Which server routes the RADIUS messages between RADIUS clients and RADIUS server?

which function that can check network-access authentication credentials and has access to user-account information?

performs centralized connection authentication and accounting for Access-Points and switches connections

in Windows Deployment Services you can install the__by itself to allow a computer to send data by using multicast packets.

The image that contains only the operating system and drivers is known as

A domain administator has setup a Network Access Protection in corperation's network, he checked the event logs of the server and found the an event with ID 6273. What this even is mean?

To provide authorization and authentication for member has a two-way trust with the NPS server’s member domain

Scheduled-Cast can be configured in two ways.______is one of them.

One of the functions that the deployment server provided is

You may specify which RADIUS servers to use for RADIUS accounting by setting up

means that Network Policy Server rejected the call for a user

You can create and manage unattended installation answer files and distribution shares by using

allows client computers to receive an IP address from multiple logical subnets even when the clients are located in the same physical subnet.

The image that contains some of the applications required by most users is knownas

DHCP manages the distribution of IP addresses in TCP/IP networks of all sizes. When this service fails, clients lose connectivity to the network and all of its resources. A new feature in Windows Server 2012_______addresses this issue.

You must specify the_______of a replication group when configuring it.

File Management Tasks can:

Using a variety of properties,_____helps you to define, categorize, and manage data.

In windows Server 2012 a feature that optimizes volume storage by redirecting redenundant data to a single storage point, it is called

Methods for optimizing a namespace include:

To configure DHCP failover, you must establish a failover relationship between the services of the two DHCP servers. This relationship must also be given a

During dynamic IP address allocation, the DHCP server creates____automatically for DHCP clients in the DNS database

You want to control the types of files that can be saved on file servers. Which tool you should use?

contains single-label names that are unique across an entire forest.

These functions take advantage of classification management's capabilities to let you remove old files or transfer them to a particular location depend on a file property like file name or file type

_______is a DNS server on your network that you set up to forward DNS queries for host names and it can't resolve to other DNS servers for resolution.

A single IPAM server can support many DHCP servers and DNS servers, What is the maximum number of DNS servers that IPAM can support?

By default the DHCP server dynamically updates both the client computer's host (A) and pointer (PTR) resource records. Moreover, there is a feature in Windows Server 2012 R2 which introduces the ability to disable only____

Among each participant server, a___________is synchronizedAmong each participant server, a___________is synchronized

______can distribute IP addresses and other network configuration information to clients who request it.

How many years of forensic IP data will IPAM server store?

Which of the following is a distributed file system protocol ?

________is a collection of servers that work together to replicate one or more folders.

______is commonly known as a Multicast Address Dynamic Client Allocation Protocol (MADCAP) scope

You need to manage and monitor your server's storage capacity effectively, which role service you need to install?

This happend when a communication-interrupted state between the two DHCP servers that uses as failover server

The Domain Admin group can perform the following tasks in DFS administration

IPsec enforcement is the weakest form of limited network access or communication in NAP.

Deployment Server uses TFTP protocol because it is a faster transmission protocol

A radius client Provides authentication, authorization, and accounting (AAA) services

You can configure network access server (NAS) to act as a RADIUS server.

NPS is implemented as a server feature in Windows Server 2012 and newer versions

We can use .vhd files as install images in WDS.

You can define client health policies in NPS by adding one or more SHVs to the health policy

WSUS allows you to deploy to computers that don't have an operating system installed.

Direct Access enforcement is more complex to implement than other enforcement methods, because it requires an HRA and a CA

You can defend your network from hackers by implementing NAP.

A server with routing service can be RADIUS client.

DFS Replication isn't self-healing and can't automatically recover from failure.

One of the replication Topologies is Full mesh that Each member replicates to all others, as required if the member of group are 10 or more in the replication group.

Storage reports provides a method for controlling the types of files that can be saved on file servers

When the amount of data exceeds each configured threshold, a soft quota prohibits users from saving files after the space limit has been reached, and it produces notifications.

Health Report is one of the tools available for monitoring and troubleshooting DFS Replication. It creates a test file in a replicated folder to ensure that replication is working and to provide statistics for the propagation study.

A DFS namespace can be configured as Domain-based namespace only

The refresh interval is the period during which a record is not available for a refresh.

The DNS Admins group is a Domain Local security group, and by default has no members in it

File screen templates provide information about file usage on a file server

A multicast scope is a collection of multicast addresses from the class B IP address range of 224.0.0.0 to 239.255.255.255 (224.0.0.0/3).

Multicast scopes allow applications to reserve multicast IP address for data and content delivery.

As files are modified, DFS Replication uses RDC, which allows it to replicate only the changed file blocks.

Replication Group is a set of servers that participate in replicating one or more replicated folders

What are the two types of images that you can use in Windows Deployment Services?

What are the uses of NAP tracing?

NPS can enforce health- requirement policies on client computers?

A remediation server group is list of servers on the restricted network that noncompliant NAP clients can access for software updates

A Soft quota prevents users from saving files after the space limit is reached, and it generates notifications when the volume of data reaches each configured threshold

The multicasting engine provides the main utility of the Transport Server component

FSRM is a role service under the File Services role in Windows Server 2012

For client computers to communicate with a WDS server without an operating system, the client computer must support perboot execution environment (PXE)

........... provides a method for controlling the types of files that can be saved on file servers

……………. the weakest form of NAP enforcement?

Storage reports provide information about file usage on a file server by

A server or device that forwards RADIUS requests to a RADIUS server.

which of the following is NOT a type of NPS logging?

It is a software platform and technology that allows you to perform automated networkbased installations based on network-based boot and installation media?

Which of these list is not requirements in WDS?

Shows a list of files that are the same size and have the same last modified data?

A set of technologies that enable a Windows server to organize multiple distributed SMB file shares into a distributed file system.

What is the default time a DFS client will hold a list of targets before it requests a new list?

It contains just the operating system and the necessary settings for a computer to be used in a network environment.

Which NAP enforcement client would be appropriate for enforcing health policies when a client computer is accessing your network through a 802.1x wireless connection?

Which of the following setting for NAP enforcement NOT an available option when setting up how want to enforce NAP?

Which of the following windows options will need your laptop users to use folder redirection?

It enables you to service and manage Windows images.

………….. uses plaintext passwords and is the least secure authentication protocol in Authentication methods for NPS.

NAP can prevent authorized users with compliant computers from performing malicious activities on the network

The current system health state is provided by these computers to NAP health policy servers

Network policies are sets of conditions and settings that designate which RADIUS servers perform the authentication and authorization of connection requests that NPS receives from RADIUS clients

………is one of the strategies for enforcing the NAR When we apply this strategy on noncompliant devices, network access is limited using an IPv4 address setup. So, it allow only access to the restricted network

You should not nable the Network Acces Protection Clent service when you deploy NAP to NAP capable client computers.

A RADIUS proxy is required for Providing authentication and authoritationfor user ccounts that are not Active Directory members

VPN enforcement is the strongest form of limited network access or communication in NAP.

…………. evaluates statements of health sent by client computers which attempt to connect to the private network

The transport server component provides two types of multicasting, what are they?

Ater you instal NPS,a default connection request policy is ereated with the Authentication is configured.

The image that contains every application required by an end-user known as

A domain administrator has setup a Network Access Protection in corperation's network, he checked the event logs of the server and found the an event with ID 6274. What this even is mean

A domain administrator has setup a Network Access Protection in corperation's network, he checked the event logs of the server and found the an event with ID 6276. What this even is mean

NPS can record events inte the system and serurity lags

Windows Deployment Services allows you to deploy only installation images for appreved operating systems and works with wim, whd., and.vhdx image files.

When you choose EAP as the authentication method the negotiation of the EAP type occurs between the access client and the NPS client.

What is the name of command set that is equivalent to all configuration NPS MMC snap-in settings?

We can use vhd files as install images in WDS

You are a network administrator Example.com. You have a server named SVR1 that runs Windows Server 2012 R2. SVR1 has the DHCP Server server role and the Network Policy Server role service installed. You enable Network Access Protection (NAP) on all of the DHCP scopes on SVR1. You need to create a DHCP policy that will apply to all of the NÁP noncompliant DHCP clients. Which criteria should you specify when you create the DHCP policy?

Your Network Policy Server (NPS) servers named Server1, Server2, Servers, and Server4. Server1 is configured as a RADIUS proxy that forwards connection requests to a remote RADIUS server group named Groupt1 You need to ensure that Server2 and Server3 receive connection requests. Server 4 must only receive connection requests if both Server2 and Server3 are unavailable. How should you configure Group1?

Your network contains an Active Directory domain named contoso.com. The domain contains a server named SRVI that runs Windows Server 2012 Ihas the following role services instaled • DirectAccess and VPN (RRASI • Network Policy Server Remote users have dient computers that run either Windows XP. Windows 7, or Windows 8. You need to ensure that only the client computers that run Windows 7 or Windows 8 can establish VPN connections to SRVI. What should you configure on SRV1?

In Windows Deployment Service, you can perform network-base d installation without DHCP server in your network.

The network access server (NAS) can be set up to serve

Default ports for accounting requests that forwarded to a RADIUS server are (Choose two ansers)

By default, NPS sends and receives RADIUS traffic by using (TCP) ports 1812 (for authentication ) and 1813 (for accounting).

It's a separate logical or physical network made up of Remediation servers or NAP dients that have limited access.

Default ports for authentication requests that forwarded to a RADIUS server are (Choose two answers)

WIM imge type can only has one operating system's image

vhd files can store up to 4 gigabytes (GB) of data

System health agents are NAP infrastructure components that provide health state status and validation

System (SHAS) and SHVS are NAP infrastructure components that provide healthstate status and validation

The port 1645 is used by NPS to forward accounting requests

--means that the NPS granted access to a user

is used to perform authentication by using a database that is not a Windows account database or AD A

The Deployment Server component of Windows Deployment Services doesn't require the installation of the Transport Serve.

You can use NPS as a RADIUS proxy when:

has connection request policies that indicate which connection requests the NPS server will be forwarded to

Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2012 R2 and has the Network Policy Server role service installed. An administrator creates a RADIUS client template named Template1. You create a RADIUS client named Client1 by using Template 1. You need to modify the shared secret for Client 1. What should you do first?

What are the default ports that NPS listens to for RADIUS traffic?

The least secure authentication methods for an NPS server is

What is the process's name of verifying that find out a user who try to connect to a network?

The IPsec NAP enforcement is comprised of …….. and an IPsec NAP enforcement client.

The deployment server provides the following functionality: (choose two)

MS-CHAP v2 provides stronger security for network access connections than its predecessor, MS-CHAP

FSRM is a role service under the File Services role in Windows Server 2012.

When a Windows dient operating system is configured to use the DHCP service, the client can use …………in its subnet to request IP configuration from any DHCP server that receives the request.

is a collection servers together replicate one or more folders

Which storage feature in Windows server 2012 that provides bandwidth efficiency with scale and performance toolbar

………….... enable users to access business data securely at any location and on any device

You have a server named HQ1. You install the IP Address Management (IPAM) Server feature on HQ1. You need to provide a user named AHMED with the ability to set the access scope of all the DHCP servers that are managed by IPAM. The solution must use the principle of least privilege.Which user role should you assign to AHMED?

Joe will be performing a basic installation of Windows 8.1 on a clean hard disk. Where will he obtain the images for his istallation?

A............... is a collection of individual scopes that are grouped together for administrative purposes

Windows 8 or newer microsoft OS is not necessary if you want to use device claims in conditional expressions.

Prevents Windows operating systems from having their DNS name registrations overwritten by non-Windows operating systems that have the same name

You can not deploy claims between trusted forests in Microsoft Dynamic Access Control

AD RMS provides greater protection for documents by controlling how applications use them, and also works with user or group SID

DHCP failover do not supports the hot standby mode and the load sharing mode

A software component or host adapter on the server that provides access to ISCSI Targets

Global Names zones provide single-label name resolution for large enterprise networks that donot deploy WINS and that have multiple DNS domain environments

DAC in Windows Server 2012 is a new access control mechanism for……………

The DHCP server are leased IP addresses to clients for a configurable period, and are regularly renewed

In IPAM server the minimum RAM Requirement is

The IPAM server must be member in a domain, and can be a domain controller

In PAM server the minimum free disk space Requirement is

NTFS file system permissions and ACLS provide access control that is based on a user's SID

A............. is something that AD DS states about a specific object

Which of the updates settings would you want to use on your Windows Server?

You can use Miinath TO IMPLOY when you have more than one physical network connection between your iSCSI initiator and your ISCS targets

Enables two DHCP servers to provide IP addresses and optional configurations to the same subnets or scopes

In DNS Security: Which technolgy make Randomizes the source port for issuing DNS queries

Run on the storage device and enable access to the disks

In hosted cache mode in BranchCache, the content cache at the branch office is hosted on one or more server computers that are hosted cache servers

Forwards queries for specific DNS suffixes to specific DNS servers