Exam 70-740 topic 1 question 70 discussion

Actual exam question from Microsoft's 70-740

Question #: 70
Topic #: 1

Your network contains an Active Directory forest named contoso.com.
The forest contains a member server named Server1 that runs Windows Server 2016. Server1 is located in the perimeter network.
You install the Active Directory Federation Services server role on Server1. You create an Active Directory Federation Services (ADFS) farm by using a certificate that has a subject name of sts.contoso com.
You need to enable certificate authentication from the Internet on Server1.
Which two inbound TCP ports should you open on the firewall? Each correct answer presents part of the solution.

A. 389
B. 443
C. 3389
D. 8531
E. 49443

Show Suggested Answer

Suggested Answer: BE 🗳️

by RockClimber at June 4, 2019, 7:20 a.m.

Comments

Submit Cancel

lbs

5 years ago

AD FS in Windows Server 2016 allows different bindings for device authentication and user certificate authentication on the same host. Port 49443 for user certificate authentication and port 443 for device certificates authentication. https://docs.microsoft.com/en-us/windows-server/identity/ad-fs/operations/ad-fs-support-for-alternate-hostname-binding-for-certificate-authentication

upvoted 4 times

...