Exam 70-742 All Questions

View all questions & answers for the 70-742 exam

Exam 70-742 topic 1 question 234 discussion

Actual exam question from Microsoft's 70-742

Question #: 234
Topic #: 1

Your network contains an Active Directory domain named contoso.com. The domain contains an Active Directory Federation Services (AD FS) server named
ADFS1, a Web Application Proxy server named WAP1, and a web server named Web1.
You need to publish a website on Web1 by using the Web Application Proxy. Users will authenticate by using OAuth2 preauthentication.
What should you do first?

A. On Web1, add site bindings.
B. On Web1, add handler mappings.
C. On ADFS1, enable an endpoint.
D. On ADFS1, add a claims provider trust.

Show Suggested Answer

Suggested Answer: C 🗳️

by Hayemaker at Jan. 30, 2019, 10:08 a.m.

Comments

Submit Cancel

Hayemaker

Highly Voted 6 years, 5 months ago

D is wrong as it’s relying party trust that is needed for WAP via OAuth. https://docs.microsoft.com/en-us/windows-server/remote/remote-access/web-application-proxy/publishing-applications-using-ad-fs-preauthentication#BKMK_1.4 So C would be better.

upvoted 8 times

GenjamBhai

4 years, 10 months ago

C is ok For app that uses OAuth2 (Windows Store apps) - require ADFS OAuth Endpoint to be Proxy Enabled first, do not support redirects

upvoted 6 times

...

yesboet

Most Recent 4 years, 7 months ago

C. On ADFS1, enable an endpoint.

upvoted 2 times

...

promaster

4 years, 10 months ago

Answer is Correct:..........In the AD FS Management console, you must make sure that the OAuth endpoint is proxy enabled. To check if the OAuth endpoint is proxy enabled, open the AD FS Management console, expand Service, click Endpoints, in the Endpoints list, locate the OAuth endpoint and make sure that the value in the Proxy Enabled column is Yes. https://docs.microsoft.com/en-us/windows-server/remote/remote-access/web-application-proxy/publishing-applications-using-ad-fs-preauthentication

upvoted 2 times

...

Kamikazekiller

4 years, 11 months ago

C. On ADFS1, enable an endpoint.

upvoted 2 times

...

aigles

5 years, 6 months ago

As per this link : https://docs.microsoft.com/en-us/windows-server/remote/remote-access/web-application-proxy/publishing-applications-using-ad-fs-preauthentication Publish an Application that uses OAuth2 such as a Microsoft Store App In the AD FS Management console, you must make sure that the OAuth endpoint is proxy enabled. Answer should be C

upvoted 3 times

...

xziomal9

5 years, 6 months ago

Correct answer: D. On ADFS1, add a claims provider trust.

upvoted 1 times

...

coleman

5 years, 7 months ago

the correct answer is D. On ADFS1, add a claims provider trust. A claims provider trusts are trust objects typically created in resource partner organizations to represent the organization in the trust relationship whose accounts will be accessing resources in the resource partner organization.

upvoted 3 times

Rijvi

4 years, 7 months ago

you are probably wrong on this one

upvoted 1 times

...

Honken

5 years, 7 months ago

But why can't I add a site binding on Web1 before I add the endpoint on ADFS1?

upvoted 1 times

...

khan6442

5 years, 7 months ago

C is correct

upvoted 3 times

...

panda

5 years, 8 months ago

I think C is correct. On claim-based authentication a client has to connect with only web application proxy. But on OAuth based a client has to connect with web application proxy and federation server. Because of this endpoint must be set on federation server with which client can connect.

upvoted 4 times

lbs

5 years, 2 months ago

Good point! Thx

upvoted 2 times

...

ArchBishop

5 years, 11 months ago

Definitions can be useful in this situation. Here is a link to a page containing the different ADFS components and their descriptions: https://docs.microsoft.com/en-us/windows-server/identity/ad-fs/technical-reference/understanding-key-ad-fs-concepts

upvoted 3 times

...

YR

6 years ago

As the others have said, OAuth needs an endpoint.

upvoted 4 times

...