You manage a server that runs Windows Server 2008. The server has the Web Server (IIS) role
installed. The server hosts an Internet-accessible Web site that has a virtual directory named
/orders/. A Web server certificate is installed and an SSL listener has been configured for the Web
site. The /orders/ virtual directory must meet the following company policy requirements: Be
accessible to authenticated users only. Allow authentication types to support all browsers. Encrypt
all authentication traffic by using HTTPS. All other directories of the Web site must be accessible to
anonymous users and be available without SSL You need to configure the /orders/ virtual directory
to meet the company policy requirements. Which two actions should you perform? (Each correct
answer presents part of the solution. Choose two.)
A.
Configure the Web site to the Require SSL setting.
B.
Configure the /orders/ virtual directory to the Require SSL setting.
C.
Configure the Digest Authentication setting to Enabled for the /orders/ virtual directory.
D.
Configure the Basic Authentication setting to Enabled and the Anonymous Authentication setting
to Disabled for the Web site.
E.
Configure the Basic Authentication setting to Enabled and the Anonymous
Authentication setting to Disabled for the / orders/ virtual directory.
Explanation:
To configure the /salesorders/ virtual directory so that it is accessible to authenticated users only
and it should allow authentication types to support all browsers, you need to configure the Basic
Authentication setting to Enabled for the / salesorders / virtual directory, because the Basic
authentication is supported by mostly all the browsers. Next you need to Disable the Anonymous
Authentication setting to for the / salesorders / virtual directory, so that only authenticated users
can access the virtual directory. Finally, you need to configure only the /salesorders / virtual
directory to the Require SSL setting so that only the authentication traffic to this directory is
encrypted and all other directories of the Website must be accessible to anonymous users and be
available without SSL. To configure authentication for a virtual directory or a physical directory in a
Web site, you need to configure the virtual directory for the Web site and not the website.
Reference: How to configure IIS Web site authentication
http://support.microsoft.com/kb/308160