PrepAway - Latest Free Exam Questions & Answers

How should you complete the relevant Windows PowerShell commands?

DRAG DROP
You manage a server named WAP01 that has the Web Application Proxy feature deployed. You deploy a
web application named WebApp1 to a server named WEB01. WAP01 and WEB01 both run Microsoft
Windows Server 2012 R2 and are members of the Active Directory Domain Services (AD DS) domain
named corp.contoso.com.
You have the following requirements:
 WebApp1 must be available internally at URL https://webappl.corp.contoso.com by using
Kerberos authentication.
 WebApp1 must be available externally at URL https://webappl.contoso.net by using Active
Directory Federation Services (AD FS) authentication.
You need to configure computer accounts.
How should you complete the relevant Windows PowerShell commands? To answer, drag the
appropriate Windows PowerShell segment to the correct location. Each Windows PowerShell segment
may be used once, more than once, or not at all. You may need to drag the split bar between panes or
scroll to view content.

PrepAway - Latest Free Exam Questions & Answers

Answer: See the explanation

Explanation:
Box 1: WEB01
Box 2: https://webappl.contoso.net,
Box 3: WAP01
Box 4: WEB01

Box 1: WEB01
The Set-ADComputer cmdlet modifies the properties of an Active Directory computer object. The
computer is Web01 which hosts the web application
Box 2: https://webappl.corp.contoso.com
The ServicePrincipalNames specifies the service principal names for the account. This parameter sets the
ServicePrincipalNames property of the account. We set it to the URL of the service.
Box 3: WAP01
Box 4: WEB01
We now set up Kerberos delegation for the WAP01 application through the WEB01 server.
Set-ADComputer Kerberos
https://technet.microsoft.com/en-us/library/ee617263.aspx

3 Comments on “How should you complete the relevant Windows PowerShell commands?

  1. genjam.bhai says:

    Box 1: WEB01
    Box 2: http/webapp1.contoso.net -> see format for SPN name. /:
    Box 3: WAP01
    Box 4: http/webapp1.contoso.net

    First, create SPN for Kerberos auth, and then set up delegation. Allow WAP01 to delegate auth for SPN. WAP01 handles URL translation. External users hit WAP01 and get delegated auth to WebApp on WEB01.

    https://blogs.uw.edu/kool/2016/10/26/kerberos-delegation-in-active-directory/

    https://4sysops.com/archives/how-to-configure-computer-delegation-with-powershell/

    https://docs.microsoft.com/en-us/windows/desktop/ad/name-formats-for-unique-spns

    https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/dn383995(v%3Dws.11)




    1



    0

Leave a Reply