Exam 70-742 topic 1 question 249 discussion

Actual exam question from Microsoft's 70-742

Question #: 249
Topic #: 1

Your network contains an Active Directory forest named contoso.com. The domain contains an Active Directory Federation Services (AD FS) server named
Server1.
On a standalone server named Server2, you install and configure the Web Application Proxy.
You have an internal web application named WebApp1. AD FS has a relying party trust for WebApp1.
You need to provide external users with access to WebApp1. Authentication to WebApp1 must use AD FS preauthentication.
Which tool should you use to publish WebApp1?

A. Remote Access Management on Server2
B. Remote Access Management on Server1
C. AD FS Management on Server2
D. AD FS Management on Server1
E. Routing and Remote Access on Server1

Show Suggested Answer

Suggested Answer: A 🗳️
To publish a claims-based application
1. On the Web Application Proxy server, in the Remote Access Management console, in the Navigation pane, click Web Application Proxy, and then in the Tasks pane, click Publish.
2. On the Publish New Application Wizard, on the Welcome page, click Next.
3. On the Preauthentication page, click Active Directory Federation Services (AD FS), and then click Next.
4. On the Supported Clients page, select Web and MSOFBA, and then click Next.
5. On the Relying Party page, in the list of relying parties select the relying party for the application that you want to publish, and then click Next.
6. On the Publishing Settings page, do the following, and then click Next:
✑ In the Name box, enter a friendly name for the application.
✑ This name is used only in the list of published applications in the Remote Access Management console.
✑ In the External URL box, enter the external URL for this application; for example, https://sp.contoso.com/app1/.
✑ In the External certificate list, select a certificate whose subject covers the external URL.
✑ In the Backend server URL box, enter the URL of the backend server. Note that this value is automatically entered when you enter the external URL and you should change it only if the backend server URL is different; for example, http://sp/app1/.
7. On the Confirmation page, review the settings, and then click Publish. You can copy the PowerShell command to set up additional published applications.
8. On the Results page, make sure that the application published successfully, and then click Close.
References:
https://docs.microsoft.com/en-us/windows-server/remote/remote-access/web-application-proxy/publishing-applications-using-ad-fs-preauthentication

by coleman at Dec. 21, 2019, 5:33 a.m.