HOTSPOT
Your network contains an Active Directory forest named contoso.com. All servers run Windows
Server 2012 R2. The forest contains two servers.
The servers are configured as shown in the following table.
You prepare the forest to support Workplace Join and you enable the Device Registration Service
(DRS) on Server1.
You need to ensure that Workplace Join meets the following requirements:
Application access must be based on device claims.
Users who attempt to join their device to the workplace through Server2 must be prevented from
locking out their Active Directory account due to invalid credentials.
Which cmdlet should you run to achieve each requirement? To answer, select the cmdlet for each
requirement in the answer area.
Answer: 
Set-ADFSGlobalAuthenticationPolicy
Set-AdfsProperties
Correct.
http://www.aiotestking.com/microsoft/which-cmdlet-should-you-run-to-achieve-each-requirement/
The Set-AdfsGlobalAuthenticationPolicy cmdlet modifies the Active Directory Federation Services (AD FS) global policy. You can also use the cmdlet to enable an external provider in the global policy.
https://blogs.technet.microsoft.com/rmilne/2014/05/05/enabling-adfs-2012-r2-extranet-lockout-protection/