Exam 70-413 topic 1 question 108 discussion

Actual exam question from Microsoft's 70-413

Question #: 108
Topic #: 1

A company has a line-of-business application named App1 that runs on an internal IIS server. App1 uses a SQL Server 2008 database that is hosted on the same server. You move the database to a dedicated SQL Server named SQL1.
Users report that they can no longer access the application by using their domain credentials.
You need to ensure that users can access App1.
Solution: You configure Kerberos-constrained delegation and then run the following command from an administrative command prompt: setspn-a MSSQLsvc/SQLl:1433 <domain>\<sql_service>
Does this meet the goal?

A. Yes
B. No

Show Suggested Answer

Suggested Answer: A 🗳️
For a default instance of SQL Server, listening on port 1433, the service principal name (SPN) format is as follows:
MSSQLSvc/serverxyz.your_domain.com:1433

MSSQLSvc/serverxyz:1433 -
Kerberos allows the use of delegation where the frontend service (for ex. Web App) can connect to a remote backend service (for ex. SQL Server) using the identity of the windows user who was authenticated to the frontend service. The user can authenticate to the frontend service using Kerberos and then the frontend service can authenticate using Kerberos to a backend service using the identity of the user.

by SummerSlumber at Oct. 3, 2020, 8:30 a.m.

Comments

Submit Cancel

SummerSlumber

4 years, 8 months ago

For a default instance of SQL Server, listening on port 1433, the service principal name (SPN) format is as follows: MSSQLSvc/serverxyz.your_domain.com:1433 MSSQLSvc/serverxyz:1433 Kerberos allows the use of delegation where the frontend service (for ex. Web App) can connect to a remote backend service (for ex. SQL Server) using the identity of the windows user who was authenticated to the frontend service. The user can authenticate to the frontend service using Kerberos and then the frontend service can authenticate using Kerberos to a backend service using the identity of the user. SQL Server Kerberos and SPN Field Guide http://blogs.msdn.com/b/sqlupdates/archive/2014/12/05/sql-server-kerberos-and-spn-quickreference.aspx

upvoted 2 times

...