Your network contains an Active Directory domain named contoso.com. You deploy a web-based application named App1 to a server named Server1. App1 uses
an application pool named AppPool1. AppPool1 uses a domain user account named User1 as its identity. You need to configure Kerberos constrained delegation
for User1. Which three actions should you perform? To answer, move the three appropriate actions from the list of actions to the answer area and arrange them in
the correct order
Select and Place:
Which three actions should you perform?
Your network contains an Active Directory domain named contoso.com. You deploy a web-based application named App1 to a server named Server1. App1 uses
an application pool named AppPool1. AppPool1 uses a domain user account named User1 as its identity. You need to configure Kerberos constrained delegation
for User1. Which three actions should you perform? To answer, move the three appropriate actions from the list of actions to the answer area and arrange them in
the correct order
Select and Place:
1) Runs SetSpn.exe and specify the -/ parameter
Change the “/” bit to L to determine the the SPNs for the account
2) Runs SetSpn.exe and specify the -S parameter
Add HTTP SPN for User1 “setspn -s” so delegation tab appears
3) From the properties of user1, open the Delegation tab, and select Trust this user for delegation to specified services only
https://support.microsoft.com/en-us/kb/929650