Exam 70-742 topic 1 question 257 discussion

Actual exam question from Microsoft's 70-742

Question #: 257
Topic #: 1

You have a server named Server1 that has the Active Directory Federation Services server role installed.
You need to configure Server1 as the authorization server. Server1 will be used to authorize access to a web API from a web application. The web application will use OAuth 2.0 and OpenID Connect to access the web API as the authenticated user.
The solution must minimize administrative effort.
What should you do first?

A. Run Add-AdfsServerApplication
B. Run New-AdfsapplicationGroup
C. Enable the OAuth endpoint
D. Run Add-AdfsNativeClientApplication

Show Suggested Answer

Suggested Answer: A 🗳️
References:
https://docs.microsoft.com/en-us/powershell/module/adfs/add-adfsserverapplication?view=win10-ps

by panda at Nov. 9, 2019, 6:17 a.m.

Comments

Submit Cancel

Semm

Highly Voted 4 years, 7 months ago

answer is correct. question is the same as Q229. the answers Run Add-AdfsNativeClientApplication and Run New-AdfsapplicationGroup are in both and incorrect. Leaving Enable the OAuth endpoint (which makes no sense) and Run Add-AdfsServerApplication (which is correct.) so both Run Add-AdfsServerApplication and Run Add-AdfsWebApiApplication are correct if you encounter this question

upvoted 6 times

...

Dejvoch

Most Recent 4 years, 5 months ago

Any other statements? I would go with A, this seems to me correct

upvoted 1 times

...

elopez2207

4 years, 5 months ago

THE ANSWER IS B)Run New-AdfsApplicationGroup You need to authorize access to a web API from a web application. So first you need to CREATE an application group with the Application Group Wizard or run New-AdfsApplicationGroup cmdlet. https://drive.google.com/drive/folders/1RAL-5nQuioK9H0IicnaTpx1dAxDvNShD?usp=sharing Explanation: https://docs.microsoft.com/en-us/windows-server/identity/ad-fs/development/enabling-oauth-confidential-clients-with-ad-fs https://docs.microsoft.com/en-us/powershell/module/adfs/new-adfsapplicationgroup?view=win10-ps https://tossolution.com/2020/05/new-adfsapplicationgroup/

upvoted 4 times

...

GenjamBhai

4 years, 10 months ago

https://docs.microsoft.com/en-us/windows-server/identity/ad-fs/overview/ad-fs-openid-connect-oauth-flows-scenarios#authorization-code-grant-flow https://docs.microsoft.com/en-us/windows-server/identity/ad-fs/development/msal/adfs-msal-web-app-web-api https://docs.microsoft.com/en-us/windows-server/identity/ad-fs/development/enabling-oauth-confidential-clients-with-ad-fs

upvoted 2 times

...

panda

5 years, 7 months ago

The link says only how to use Add-adfsServerapplication cmdlet. I don’t understand why the cmdlet is needed in this situation. Please teach me why.

upvoted 2 times

...