DRAG DROP
Contoso, Ltd. has an Office 365 tenant. The company has two servers named Server1 and Server2 that run
Windows 2012 R2 Server. The servers are not joined to the contoso.com domain. Server2 is deployed to the
perimeter network. You install Secure Sockets Layer (SSL) certificates on both servers.
You must use Integrated Windows authentication
You need to install and configure all AD FS components in the environment.
Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of
actions to the answer area and arrange them in the correct order.
Select and Place:
Explanation:
Note:
Prepare the Base Servers
Box 1, Box 2: AD FS Server
Base build the AD FS server with Windows Server 2012
Setup a connection to the internal network
Add the server to the local domain
Update the server with all Windows Updates
Box 3, Box 4: AD FS Proxy Server
Once the necessary WAP role services are installed, we are then able to launch the Web Application Proxy
Wizard to configure WAP.
Note:
Base Build the AD FS Proxy server with Windows Server 2012Setup a connection to the DMZ network (verify connectivity to the AD FS server on port 443)
DO NOT add the server to the local domain
Update the server with all Windows Updates
Anwser 1 and 2 should be switched. See the checklist at https://docs.microsoft.com/en-us/windows-server/identity/ad-fs/deployment/deploying-a-federation-server-farm
I AGREE
agree
https://docs.microsoft.com/en-us/windows-server/identity/ad-fs/deployment/join-a-computer-to-a-domain
Says:
For Active Directory Federation Services (AD FS) to function, each computer that functions as a federation server must be joined to a domain. federation server proxies may be joined to a domain, but this is not a requirement.
For me, the correct answer is join server1 & server2 in the contoso.com domain in second position.
In my opinion the box 1 and two are switched the steps should be:
1. Join server 1 to domain
2. Install and configure AD FS
3. Install win feature on server 2
4. Install webapplicationproxy on server 2