70-648 · Question #78
You deploy Network Access Protection (NAP) on your network. An administrator configures a network policy as shown in the exhibit. (Click the Exhibit button.) You discover that noncompliant client…
The correct answer is D. In Access Permission, select the Grant access. Grant access if the connection request matches this. Currently, the policy (specified and named for noncompliant computers) states that access will be denied. We must change this so that access is Granted. Checking the Ignore user account dial-in properties box would allow clients to connect, even if their dial-in tab in AD is…
Question
You deploy Network Access Protection (NAP) on your network. An administrator configures a network policy as shown in the exhibit. (Click the Exhibit button.) You discover that noncompliant client computers cannot access the remediation network. You need to configure the network policy to ensure that noncompliant client computers can access the remediation network. What should you do? Microsoft 70-648 Exam
Exhibit
Options
- AIn the Type of network access server list, click HCAP Server.
- BIn the Type of network access server list, click Health Registration Authority,
- CIn Access Permission, select the Ignore user account dial-in properties check box.
- DIn Access Permission, select the Grant access. Grant access if the connection request matches this
How the community answered
(27 responses)- A11% (3)
- B4% (1)
- C4% (1)
- D81% (22)
Explanation
Currently, the policy (specified and named for noncompliant computers) states that access will be denied. We must change this so that access is Granted. Checking the Ignore user account dial-in properties box would allow clients to connect, even if their dial-in tab in AD is not configured to do so. In fact, this would force all clients on the policy setting, which is still configured to Deny access to all clients. Changing the server to an HCAP or HRA would allow it to send clients to the remediation network
Topics
Community Discussion
No community discussion yet for this question.