Your network contains a perimeter network and an internal network. The internal network contains
an Active Directory Federation Services (AD FS) 2.1 infrastructure. The infrastructure uses Active
Directory as the attribute store.
You plan to deploy a federation server proxy to a server named Server2 in the perimeter network.
You need to identify which value must be included in the certificate that is deployed to Server2.
What should you identify?
A.
The FQDN of the AD FS server
B.
The name of the Federation Service
C.
The name of the Active Directory domain
D.
The public IP address of Server2
Explanation:
To add a host (A) record to corporate DNS for a federation server
On a DNS server for the corporate network, open the DNS snap-in.
1. In the console tree, right-click the applicable forward lookup zone, and then click New Host (A).
2. In Name, type only the computer name of the federation server or federation server cluster (for
example, type fs for the fully qualified domain name (FQDN) fs.adatum.com).3. In IP address, type the IP address for the federation server or federation server cluster (for
example, 192.168.1.4).
4. Click Add Host.Add a host (A) record to corporate DNS for a federation server
http://technet.microsoft.com/en-us/library/HYPERLINK “http://technet.microsoft.com/enus/library/cc776786(v=ws.10).aspx#_blank”cc776786(v=ws.10).aspx
Well I think A will work but I think it can be B
https://msdn.microsoft.com/en-us/library/azure/dn151311.aspx
On the other hand A is problanly more correct for 2012r2
MCSA your link provided the correct answer – B. SAN on the certificate for Federation server is federation service name, e.g. fs.contoso.com. Federation Proxy server follows the same certificate as Federation Server 😉
Definitely looks like it’s B on this one – here is another link:
https://technet.microsoft.com/en-us/library/dd807054(WS.10).aspx
“It is important to verify that the subject name in the server authentication certificate matches the Federation Service name value that is specified in the AD FS 2.0 Management snap-in. To locate this value, open the snap-in, right-click Service, click Edit Federation Service Properties, and then find the value in Federation Service name text box.”
I’ve configured many ADFS / Proxy solutions both simple and complex. The answer is B.
Cheers Blazz
https://technet.microsoft.com/en-us/library/cc776786(v=ws.10).aspx#_blank
A in my opinion
Thats for DNS. Not certificate signing.
Answer is B.
B