nerdexam
Microsoft

70-648 · Question #81

Your network contains an Active Directory forest. The forest contains a member server named VPN1 that runs Windows Server 2008 R2. You configure VPN1 as a VPN server. You need to ensure that only…

The correct answer is B. Network Policy Server (NPS). Microsoft 70-648 Exam We can do these kinds of verification on VPN connections with NAP, which is a service of the In addition, if NAP-capable client computers are running Windows Update Agent and are registered with a Windows Server Update Service (WSUS) server, NAP can verify…

enhanced security implementations

Question

Your network contains an Active Directory forest. The forest contains a member server named VPN1 that runs Windows Server 2008 R2. You configure VPN1 as a VPN server. You need to ensure that only client computers that have Windows Update enabled can establish VPN connections to VPN1. What should you install on VPN1?

Options

  • AWindows Server Update Services (WSUS)
  • BNetwork Policy Server (NPS)
  • CHealth Registration Authority (HRA)
  • DConnection Manager Administration Kit (CMAK)

How the community answered

(60 responses)
  • A
    3% (2)
  • B
    72% (43)
  • C
    17% (10)
  • D
    8% (5)

Explanation

Microsoft 70-648 Exam We can do these kinds of verification on VPN connections with NAP, which is a service of the In addition, if NAP-capable client computers are running Windows Update Agent and are registered with a Windows Server Update Service (WSUS) server, NAP can verify that the most recent software security updates are installed based on one of four possible values that match security severity ratings from the Microsoft Security Response Center (MSRC). Health Registration Authority (HRA) provides a service for the Network Access Protection (NAP) platform that is commonly referred to as a registration authority in an X.509 public key infrastructure (PKI). As a registration authority, HRA is responsible for validating client credentials and then forwarding a certificate request to a certification authority (CA) on behalf of the client. (MY NOTE: It should be noted that HRA works with NAP, with requires NPS!) Installing WSUS on VPN1 might give us a place from which udpates could be downloaded for remediation of VPN clients, but it will not be able to perform the checking of client computers that Connection Manager is a versatile client dialer and connection software that you can customize by using the Connection Manager Administration Kit (CMAK) wizard. (Basically, we can use this to customize connections using a connection wizard, but it will not help the VPN server know if clients are up-todate or not)

Topics

#NAP#NPS#VPN#health policy

Community Discussion

No community discussion yet for this question.

Full 70-648 Practice