70-647 · Question #29
Your network consists of one Active Directory domain and one IP subnet. All servers run Windows Server 2008 R2. All client computers run Windows 7. The servers are configured as shown in the…
The correct answer is C. IPsec. To ensure that only the computers that have the latest Microsoft updates installed must be able to connect to servers in the domain and only the computers that are joined to the domain must be able to connect to servers in the domain, you need to use IPSec NAP enforcement…
Question
Your network consists of one Active Directory domain and one IP subnet. All servers run Windows Server 2008 R2. All client computers run Windows 7. The servers are configured as shown in the following table. (Click the Exhibit) All network switches used for client connections are unmanaged. Some users connect to the local area network (LAN) from client computers that are joined to a workgroup. Some client computers do not have the latest Microsoft updates installed. You need to recommend a Network Access Protection (NAP) solution to protect the network. The solution must meet the following requirements:
- Only computers that are joined to the domain must be able to connect
to servers in the domain.
- Only computers that have the latest Microsoft updates installed must
be able to connect to servers in the domain. Which NAP enforcement method should you use?
Exhibit
Options
- A802.1 x
- BDHCP
- CIPsec
- Dvirtual private network (VPN)
How the community answered
(34 responses)- A6% (2)
- B3% (1)
- C79% (27)
- D12% (4)
Explanation
To ensure that only the computers that have the latest Microsoft updates installed must be able to connect to servers in the domain and only the computers that are joined to the domain must be able to connect to servers in the domain, you need to use IPSec NAP enforcement method. IPsec domain and server isolation methods are used to prevent unmanaged computers from accessing network resources. This method enforces health policies when a client computer attempts to communicate with another computer using IPsec.
Topics
Community Discussion
No community discussion yet for this question.