Exam 70-412 topic 3 question 268 discussion

Actual exam question from Microsoft's 70-412

Question #: 268
Topic #: 3

The Wingtip Toys forest hosts a web application that users in the Tailspin Toys forest need to access. You are the system administrator at Wingtip Toys. A single federation server is present in each forest and you are configuring a federated trust.
Which of the following statements are true about the deployment solution? (Choose all that apply.)

A. The AD FS server in the Tailspin Toys forest will function as the claims-provider server.
B. The AD FS server in the Tailspin Toysforest will function as the relying-party server.
C. Configure a relying-party trust on the Wingtip Toys AD FS server.
D. Configure a claims-provider trust on the Wingtip Toys AD FS server.

Show Suggested Answer

Suggested Answer: AD 🗳️

by DanStafford at Aug. 7, 2020, 7:04 p.m.

Comments

Submit Cancel

NerdAlert

4 years, 5 months ago

Hahaha isn't this the same as the previous question? The side with a webapp is the Relying Party - they rely on claims to prove users can gain access. The side who wants to access the webapp is the Claims Provider. They provide claims that they are who they say they are, in order to gain access. As we know, the direction of the trust is opposite of the direction of the access. So, the relying party (side with webapp) needs a claims-provider trust, and the Claims provider (side who needs to access webapp) needs a relying-party trust. "I trust you - you can go through my stuff."

upvoted 1 times

NerdAlert

4 years, 5 months ago

In conclusion - B and C are correct again. Same question

upvoted 1 times

...

DanStafford

4 years, 10 months ago

Ok, now I get it: If you have the users, you have to configure your server to trust the Relying Party's server. (Configure a relying party trust) If you have the web app, you have to configure your server to trust the clams provider's server. (Configure a Claims Provider trust)

upvoted 1 times

...

DanStafford

4 years, 10 months ago

Now I'm really confused on the trusts. I thought the claims-provder server configured the relying party trust, and the relying party server configured the claims provider trust? Time for some technet...

upvoted 1 times

...