Question

Your network contains an Active Directory domain named . All domain controllers run Windows Server 2008 R2. The domain contains three servers that run Windows Server 2012. The servers are configured as shown in the following table. Server1 and Server2 are configured in a Network Load Balancing (NLB) cluster. The NLB cluster hosts a website named Web1 that uses an application pool named App1. Web1 uses a database named DB1 as its data store. You create an account named User1. You configure User1, as the identity of App1. You need to ensure that domain users accessing Web1 connect to DB1 by using their own credentials. Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.) A. Configure the delegation settings of Server3. B. Create a Service Principal Name (SPN) for User1. C. Configure the delegation settings of User1. D. Create a matching Service Principal Name (SPN) for Server1 and Server2. E. Configure the delegation settings of Server1 and Server2.

Answer 1

In order to ensure domain users connect to DB1 using their credentials, they should Create a Service Principal Name (SPN) for User1, and Configure the delegation settings of User1.So the correct option is B and C.

Step-by-step explanation:

To facilitate domain users connecting to DB1 with their credentials, two actions are required:

B. Create a Service Principal Name (SPN) for User1: Generate an SPN for User1 associated with the service it represents, ensuring proper authentication delegation.

E. Configure the delegation settings of Server1 and Server2:

Enable constrained delegation on Server1 and Server2 for User1, permitting these servers to impersonate the user when connecting to DB1.

By creating the SPN for User1, you establish its identity for the service it represents.

Then, configuring constrained delegation on Server1 and Server2 allows these servers in the NLB cluster to impersonate users and forward their credentials to DB1.

This setup enables seamless user authentication for accessing the DB through Web1, enhancing security and user experience within the network infrastructure.

So these are the correct options.(Band C)