Your network contains an Active Directory forest named contoso.com. The forest contains a server named Server1 that is configured as an enterprise certification authority (CA). The forest contains a server named Server2 that has the Network Policy Server (NPS) role service installed.
You deploy Network Access Protection (NAP).
You discover that Server1 fails to issue health certificates. You need to ensure that health certificates can be issued.
http://www.lead2pass.com/70-642.html
What should you do?
A. Install an additional server, configure the new server as a standalone CA, and then configure the Health Registration Authority (HRA) to use the CA.
B. From the Network Policy Server console, create a new health policy.
C. From the Network Policy Server console, modify the Windows System Health Validators settings.
D. Install the Host Credential Authorization Protocol (HCAP) role service on Server1.
