Your company uses Network Access Protection (NAP) to enforce policies on client
computers that connect to the network.
Client computers run Windows 7. A Group Policy is used to configure client computers to obtain updates from Windows Server Update Services (WSUS). Company policy requires that updates labeled Important and Critical must be applied
before client computers can access network resources.
You need to ensure that client computers meet the company policy requirement.
What should you do?

• A. Enable the Security Center on each client.
• B. Disconnect the connection until the required updates are installed.
• C. Quarantine clients that do not have all available security updates installed.
• D. Enable automatic updates on each client.

Your network contains two Active Directory forests named contoso.com and nwtraders.com.
Active Directory Rights Management Services (AD RMS) is deployed in each forest.
You need to ensure that users from the nwtraders.com forest can access AD RMS protected content in the contoso.com forest.
What should you do?

• A. Add a trusted user domain to the AD RMS cluster in the nwtraders.com domain.
• B. Add a trusted user domain to the AD RMS cluster in the contoso.com domain.
• C. Create an external trust from contoso.com to nwtraders.com.
• D. Create an external trust from nwtraders.com to contoso.com.

Your network contains an Active Directory domain.
You deploy Network Access Protection (NAP).
You need to verify whether VPN clients have Windows Firewall enabled.
What should you configure?

• A. the RADIUS Authentication authentication provider
• B. the RADIUS Accounting accounting provider
• C. health policies
• D. the Windows Accounting accounting provider
• E. IKEv2 client connections
• F. system health validators (SHVs)
• G. Group Policy preferences
• H. connection request policies
• I. the Windows Authentication authentication provider
• J. remediation server groups

Your network contains an Active Directory forest. The forest contains an Active Directory site for a remote office. The remote site contains a read-only domain controller (RODC).
You need to configure the RODC to store only the passwords of users in the remote site.
What should you do?

• A. Modify the Partial-Attribute-Set attribute of the forest.
• B. Add the user accounts of users who are not in the remote site to the Denied RODC Password Replication Group.
• C. Add the user accounts of the remote site users to the Allowed RODC Password Replication Group.
• D. Create a Password Settings object (PSO).

Your company has an Active Directory domain. A server named Server1 runs Windows Server 2008 R2. The Remote Desktop Services server role and the RD Web Access role service are installed on Server1.
You install the RD Gateway role service on Server1. You create the Remote Desktop connection authorization policy. Users report that they cannot connect to Server1.
You need to ensure that users can connect to Server1.
What should you do?

• A. Configure Network Access Protection (NAP) on Server1.
• B. Configure the Remote Desktop Resource Authorization Policy (RD RAP) on Server1.
• C. Create a Remote Desktop Group Policy object (GPO). Enable the Allow log on through Remote Desktop Services setting on the GPO. Link the GPO to the domain.
• D. Create a Remote Desktop Group Policy object (GPO). Enable the Set path for Remote Desktop Services Roaming User Profile setting on the GPO. Create an organization unit (OU) named RDSUsers. Link the GPO to the RDSUsers OU.