Exam 70-486 topic 1 question 46 discussion

Actual exam question from Microsoft's 70-486

Question #: 46
Topic #: 1

You are developing an ASP.NET MVC application to be used on the Internet. The environment uses Active Directory with delegation to access secure resources.
Users must be able to log on to the application to maintain their personal preferences.
You need to use the least amount of development effort to enable users to log on.
What should you do?

A. Enable Forms authentication
B. Enable Windows authentication
C. Generate server SSL certificates and install them in IIS
D. Enable Digest authentication

Show Suggested Answer

Suggested Answer: B 🗳️
Requirements for Delegation -
Delegation relies on Integrated Windows authentication to access resources. There is no limit on the number of computers that you can delegate your account -- you must correctly configure each of them. The Integrated Windows authentication method works only if the following two conditions exist:
✑ You set up your network to use the Kerberos authentication protocol that requires Active Directory.
✑ You set up the computers and accounts on your network as trusted for delegation.
References:
https://support.microsoft.com/en-us/kb/810572

by hungry_ape9000 at May 12, 2020, 4:47 p.m.

Comments

Submit Cancel

LewisFrom39191005

4 years, 4 months ago

I don't see why there would be any confusion about B being the correct answer.

upvoted 3 times

...

markcowell

4 years, 7 months ago

Digest Authentication, it is the same as basic authentication except that the password is hashed before it is sent across the network. But Integrated Windows Authentication, in this kind of authentication technique, passwords are not sent across the network. The application here uses either the kerberos or challenge/response protocols to authenticate users. So if you use AD account, I suggest you using Integrated Windows Authentication. Answer is B

upvoted 1 times

...

zimzimzimma

4 years, 11 months ago

Since Active Directory is explicitly mentioned I think it should be D, Digest Authentication. Also, that Windows Authentication is only possible with Active Directory is not correct. You can do that with local user accounts too. No workgroup, no active directory whatsoever.

upvoted 1 times

...

hungry_ape9000

4 years, 12 months ago

FINAL ANSWER: B is correct