Note: This question is part of a series of a questions that present the same scenario. Each question in the
series contains a unique solution that might meet the stated goals. Some questions sets might have more than
one correct solutions, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will
not appear in the review screen.
Your network contains an Active Directory forest named contoso.com. The forest contains a member server
named Server1 that runs Windows Server 2016. All domain controllers run Windows Server 2012 R2.
Contoso.com has the following configuration.
You plan to deploy an Active Directory Federation Services (AD FS) farm on Server1 and to configure device
registration.
You need to configure Active Directory to support the planned deployment.
Solution: You raise the forest functional level to Windows Server 2012 R2.
Does this meet the goal?
A.
Yes
B.
No
Explanation:
Windows Server 2016 Domain controller is required for Device Registration for Servers that run Windows
Server 2016.
https://technet.microsoft.com/en-us/windows-server-docs/identity/ad-fs/operations/configuredevice-based-conditional-access-on-premises
Why not?
if you have raise the forest you had raise the domain first.
ADFS 2016 can live you 2012 R2 level, and the old ADFS2012 allow device registration allready.
I’m wrong?
3
0
Sorry, the answer is no.If you want to deploy a new ad fs farm, you must have forest of 2016 level
0
2