Test question on NPS in Server 2012

Question

Hello!
"There's a domain member server with NPS and DHCP. You need to log all DHCP clients that have their firewalls disabled.
Which three actions and in what sequence should you perform?
a) Create a connection request policy
b) Create a network policy
c) Create WSHV
d) Create a server remediation group
e) Create a health policy"
Having read a number of MSDN documents on NPS I can't answer this question: to make an NPS server work an administrator must complete all the aforementioned tasks.
Moreover, I don't know based on what should I choose that I must "Create a server remediation group" - why creating this group
prior to creating a WSHV is correct but after is wrong?
(The answer: d-b-c).
Thank you in advance,
Michael

Answer 1

Hi,
Based on my understanding, a remediation server hosts the updates that NAP agent can use to bring noncompliant client computers into
compliance with health policy. However, whether or not a client computer that is noncompliant with WSHV is ultimately noncompliant with NAP health policy. Maybe that is why you need to create a remediation server group before creating WSHV.
More information:
Network Access Protection in NPS
http://technet.microsoft.com/en-us/library/cc754378.aspx
Windows Security Health Validator
http://technet.microsoft.com/en-us/library/cc731260.aspx
Network Access Protection with DHCP Step-By-Step Guide
http://esihere.wordpress.com/2011/04/18/network-access-protection-with-dhcp-step-by-step-guide/
Best regards,
Susie