What is the primary role of Network Policy Server (NPS) when used as a RADIUS server in remote access scenarios?

• A. It manages Windows updates.
• B. It authenticates and authorizes remote dial-in and VPN connections, centralizing policy and accounting.
• C. It binds SSL certificates to websites.
• D. It stores system state data.

Answer: (B)

When NPS is used as a RADIUS server in remote access, its main job is to authenticate and authorize remote connections and to centralize policy and accounting for those sessions. In a VPN or dial-up scenario, the access device (like a VPN gateway) forwards the user's credentials and request to NPS. NPS validates the credentials against the directory (often Active Directory), evaluates the network access policies it stores, and decides whether to allow the connection. If approved, NPS returns the appropriate attributes that define what the user can do (such as allowed tunnel type, VLAN assignment, or QoS settings). At the same time, NPS records session information for accounting—start and stop times, duration, data usage—so administrators can audit and report on remote access activity. Centralizing these decisions in one place simplifies policy management and strengthens security across all remote access devices.

Other options don’t fit because they describe functions outside the scope of RADIUS-based remote access policy and accounting: managing Windows updates, binding SSL certificates to websites, and storing system state data are handled by other components or services (such as Windows Update Services, web server/configuration tools, and backup/system state utilities).