Topic 2, Scenario 2
Background
General Background
You are employed as a SharePoint administrator for ABC.com. ABC.com’ SharePoint 2013
environment has a public website, as well as an Intranet site that contains a document library for
every ABC.com user. The public website is used for uploading multi-media files, and personalizing
processing options. The Intranet site allows ABC.com users to work in partnership with fellow
users, and to store the files that have been processed.
Technical Background
ABC.com has five front-end web servers in their SharePoint environment. These servers make
use of Windows Network Load Balancing (NLB). You have set the NLB affinity to None. Files that
have been processed are saved ABC.com’s SharePoint content database, which make use of
RAID 5 storage. The default self-service site creation feature is regularly employed by ABC.com’s
users.
ABC.com has an internal Active Directory Domain Services (AD DS) domain, named ABC.com.
servers in the ABC.com domain have Windows Server 2008 R2 installed. ABC.com’s LAN
includes the use of Active Directory Federation Services (AD FS), with two AD FS proxy servers
deployed in their external network. ABC.com users access their workstations via
[email protected].
ABC.com’s lab environment contains a dedicated AD DS environment, as well as SharePoint
2013. The principal lab SharePoint site can be accessed via lab.intranet.ABC.com. ABC.com has
a project, named ABCPROJ1, which makes use of a test site that is accessed via
lab.intranet.ABC.com/corp. the test site has the default self-service site creation feature enabled.
ABC.com’s development team have developed a SharePoint-hosted application, named ABC1, for
changing multi-media files from one format to another.
Forthcoming Expansion
ABC.com has established a new concern, named Weyland Industries. Weyland Industries will
have a domain, named weylandidustries.com. Weyland Industries are going to be responsible for
SharePoint app sales. ABC.com is planning on federating with Microsoft Office 365, whose service
will be hosted by the weylandidustries.com domain.
Technical Prerequisites
You have been informed that ABC1 should be able to access user document libraries, as well as
make use of Windows Authentication. Furthermore, a single IP address should be used by a frontend web server for SharePoint sites and apps hosted by that specific server. You have also been
informed that SharePoint sites and apps must make use of port 9000, and that single sign-on
(SSO) should be used by Office 365
Production SharePoint environment:
The checking out of big quantities of files and the requesting of big quantities of unpublished items
must be monitored.
Monitoring Prerequisites for ABCPROJ1:
Alterations to a value in a particular registry key, and SharePoint cache hit ratios should be
monitored every 24 hours, between 08H00 and 14H00.
Binary large object (BLOB) cache storage is used to store scanned contracts. The constant
congestion of the BLOB cache is resulting in users experiencing inadequate viewing performance
for scanned contracts.
*********************************************************
You are preparing to configure a suitable authentication method for ABC1. The authentication
method should satisfy the prerequisites.
Which of the following actions should you take?
A.
You should consider making use of Forms-based authentication.
B.
You should consider making use of the Secure Store Service.
C.
You should consider making use of SSL.
D.
You should consider making use of the Open Authorization 2.0 (OAuth 2.0) web authorization
protocol.
Explanation:
http://msdn.microsoft.com/en-us/library/office/fp142384(v=office.15).aspx
If you plan to build a SharePoint Add-in that runs in an remote web application and communicates back to SharePoint using server-side code, you will need to use OAuth.
Configuring server-to-server (S2S) intraserver and OAuth authentication SharePoint 2013 utilizes the Open Authorization 2.0 (OAuth 2.0) protocol to add a number of new features, including ability to establish server-to-server (S2S) connections. S2S enables you to connect a SharePoint farm to another SharePoint Server farm, an Exchange installation, or a Microsoft Lync installation.
Users can then authenticate into SharePoint and retrieve information from these other environments. Configuring S2S between two SharePoint farms When establishing this sort of relationship between SharePoint farms, one farm will be receiving S2S requests from the other. This relationship requires that the server sending the requests be configured to use HTTPS.
EXAM TIP
By default, this relationship requires that the relationship be carried out over HTT PS, which is always a best practice. If you need to establish S2S over HTT P, this is possible but not as secure, and should be done only in development environments.
Looking into both the link and regarding the above information D is the correct answer. Thanks guys!