You deploy an Active Directory Federation Services (AD FS) Federation Service Proxy on a
server namedServer1.
You need to configure the Windows Firewall on Server1 to allow external users to
authenticate by using AD FS.
Which protocol should you allow on Server1?

A.
Kerberos

B.
SSL

C.
SMB

D.
RPC

Explanation:
MS Press – Self-Paced Training Kit (Exam 70-640) (2nd Edition, July 2012) page 903
AD FS relies on secure HTTP communications by using SSL authentication certificates to
verify the identity of both the server and the client during communications. Because of this,
all communications occur through port 443 over HTTPS.