DRAG DROP
You configure a SharePoint Server 2010 Service Pack 1 (SP1) server farm. You create a web
Application in the default zone and then extend it to the Internet zone. You configure both zones to
use NTLM authentication. You need to ensure that the web Application in the Internet zone can
perform the following tasks:
• Allow anonymous users to access site collections of the web Application.
• Prevent anonymous users from modifying the content of the Application.
• Prevent users from modifying settings at the site collection level.
What should you do? (To answer, move the appropriate actions from the list of actions to the
answer area and arrange them in the correct order.)
Answer: 
Explanation:
You should set “Enable anonymous access” flag, because it enable anonymous access on IIS. It is
necessary to ensure anonymous access.
http://www.topsharepoint.com/enable-anonymous-access-in-sharepoint-2010