Installing, Configuring, and Troubleshooting the NPS Role / Implementing NAP

Question 1

1. What is a RADIUS Client
2. What is a RADIUS Server?

Answer 1

1. VPN Server
2. RADIUS Authentication Server

Question 2

What does the PowerShell CmdLet Do?

Export-NpsConfiguration

Answer 2

Exports NPS settings.

Question 3

What does the PowerShell CmdLet Do?

Get-NpsRadiusClient

Answer 3

Gets RADIUS clients.

Question 4

What does the PowerShell CmdLet Do?

Get-NpsRemediationServer

Answer 4

Retrieves a list of remediation servers from a remediation server group.

Question 5

What does the PowerShell CmdLet Do?

Get-NpsRemediationServerGroup

Answer 5

Retrieves all remediation server groups from a Network Policy Server.

Question 6

What does the PowerShell CmdLet Do?

Get-NpsSharedSecretTemplate

Answer 6

Returns a list of available shared secret templates.

Question 7

What does the PowerShell CmdLet Do?

Import-NpsConfiguration

Answer 7

Imports NPS settings.

Question 8

What does the PowerShell CmdLet Do?

New-NpsRadiusClient

Answer 8

Creates a RADIUS client.

Question 9

What does the PowerShell CmdLet Do?

New-NpsRemediationServer

Answer 9

Creates a remediation server.

Question 10

What does the PowerShell CmdLet Do?

New-NpsRemediationServerGroup

Answer 10

Creates a remediation server group.

Question 11

What does the PowerShell CmdLet Do?

Remove-NpsRadiusClient

Answer 11

Removes a RADIUS client.

Question 12

What does the PowerShell CmdLet Do?

Remove-NpsRemediationServer

Answer 12

Removes a remediation server from a remediation server group.

Question 13

What does the PowerShell CmdLet Do?

Remove-NpsRemediationServerGroup

Answer 13

Removes a remediation server group from an NPS.

Question 14

What does the PowerShell CmdLet Do?

Set-NpsRadiusClient

Answer 14

Specifies configuration settings for a RADIUS client.

Question 15

What is a RADIUS Server (NPS) ?

Answer 15

A central connection for authentication, authorization, and accounting for wireless autheticationg, switch, dialup, and VPN connections

Question 16

What is a RADIUS Proxy?

Answer 16

a Server that is configured with connection request policies that indicate which connection request the NPS Server will foward the connection request to.

It can also be used for providing authentication & autherization for non AD members or by using a non Windows Database

Question 17

What is a NAP Policy Server?

Answer 17

A NAP Policy server is a what evaluates the statement of health sent by NAP cable client computers attempting to connect to the network

Question 18

What does the following cmd do?

NETSH

Answer 18

Netsh is a command-line scripting utility that allows you to, either locally or remotely, display or modify the network configuration of a currently running computer.

Question 19

What does RADIUS stand for?

Answer 19

Remote Authentication Dial-In User Service protocol

Question 20

What does the NPS (Network Policy Server) provide?

Answer 20

It provides the following:

• RADIUS Server
• RADIUS Proxy
• NAP (Network Access Protection)

Question 21

Please describe the following NPS Functions:

• RADIUS Server
• RADIUS Proxy
• NAP Policy Server

Answer 21

• RADIUS Server
  
  • NPS performs centeralized connection authentication, authorization, and account for wireless, switch, & dial-up/VPN connections
• RADIUS Proxy
  
  • You configure connection request policies that indicate which connection requests the NPS server will forward to other RADIUS servers and to which RADIUS server you want to forward connection requests
• NAP Policy Server
  
  • NPS evaluates statements of health sent by NAP-cable client computers that attempt to connect to the network

Question 22

What is local vs RADIUS authentication?

Answer 22

• Local authentication takes place against the local security account DB or AD DS
• RADIUS authentication forwards the connection request to a RADIUS server for authentication

Question 23

What ports are used for authentication and accouting for RADIUS?

What about legacy RADIUS?

Answer 23

• 1812 for authentication and 1813 for accounting
• 1645 for authentication and 1646 for accounting

Question 24

What are the requirements for certificates based authentication in NPS?

Answer 24

• CA certificate
• Client computer certificate
• Server certificate
• User certificate

Question 25

# NPS Authentication Is a CA certificate required for EAP-TLS/PEAP-TLS? Is a CA certificate required for PEAP-MS-CHAPv2?

Answer 25

* Yes. The CA certificate is enrolled automatically for domain member computers. For nondomain member computers, you must import the certificate manually into the certificate store.

Question 26

# NPS Authentication Is a Client computer certificate required for EAP-TLS/PEAP-TLS? Is a Client computer certificate required for PEAP-MS-CHAPv2?

Answer 26

* Yes. Client computer certificates are required unless user certificates are distributed on smart cards. Client certificates are enrolled automatically for domain member computers. For nondomain member computers, you must import the certificate manually or obtain it with the Web- enrollment tool. * No, user authentication is performed with password-based credentials not certificates

Question 27

# NPS Authentication Is a Server Certificate required for the NPS Server for EAP-TLS/PEAP-TLS? Is a Server Certificate required for the NPS Server for PEAP-MS-CHAPv2? Why?

Answer 27

* Yes Why: The NPS server sends the server certificate to the client computer. The client computer uses the certificate to authenticate the NPS server.

Question 28

# NPS Authentication Is a User Certificate required for EAP-TLS/PEAP-TLS? Is a User Certificate required for PEAP-MS-CHAPv2?

Answer 28

* Yes * No

Question 29

What are the different types of accouting or logging in NPS?

Answer 29

* Event Logging * Loggin user authentication and account requests

Question 30

How would you configure a NPS Server? No Roles have been installed

Answer 30

* Install the Network Policy and Access Services Role from server manager or PowerShell * Register the NPS Server with AD * Open the Network Policy Server * Right-Click the NPS (Local), Select Register Server in Active Directory *