nerdexam
Microsoft

70-332 · Question #18

A company has an Active Directory Domain Services domain that contains a SharePoint farm. The farm contains a site collection that displays data from an employee information database. You define a…

The correct answer is A. Enable the Reports and Data Search Support site collection feature. To surface employee database data in SharePoint for HR users without credential prompts, the site collection feature that supports external data reporting must be enabled alongside a credential mapping mechanism.

Configure and manage service applications

Question

A company has an Active Directory Domain Services domain that contains a SharePoint farm. The farm contains a site collection that displays data from an employee information database. You define a custom user account named HRUsers and configure the account to have read-only permissions to the database. You have the following data access requirements for the employee information database: - Members of the Human Resources department must be able to view data by using SharePoint, without entering database credentials. - No other SharePoint users should be able to view the employee data. You need to meet the requirements. Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)

Exhibit

70-332 question #18 exhibit

Options

  • AEnable the Reports and Data Search Support site collection feature.
  • BCreate an external list that displays data from the employee information database.
  • CIn the Secure Store service application, define a target application by using a group mapping.
  • DEnable site collection reporting.
  • EIn the Secure Store service application, define a target application by using an individual mapping.

How the community answered

(27 responses)
  • A
    70% (19)
  • B
    7% (2)
  • C
    4% (1)
  • D
    4% (1)
  • E
    15% (4)

Why each option

To surface employee database data in SharePoint for HR users without credential prompts, the site collection feature that supports external data reporting must be enabled alongside a credential mapping mechanism.

AEnable the Reports and Data Search Support site collection feature.Correct

Enabling the Reports and Data Search Support site collection feature activates the infrastructure needed for SharePoint to surface and display external database content through its data connectivity layer. This allows HR users to view employee information through SharePoint without being individually prompted for database credentials, satisfying the requirement for transparent data access.

BCreate an external list that displays data from the employee information database.

Creating an external list alone does not resolve the credential requirement - HR users would still be prompted for database credentials without a credential delegation mechanism configured.

CIn the Secure Store service application, define a target application by using a group mapping.

A Secure Store target application with group mapping handles credential delegation for a group but is not sufficient alone to display the data in SharePoint without the appropriate site collection feature being enabled.

DEnable site collection reporting.

Site collection reporting enables usage and audit reporting about the SharePoint site itself and has no relation to surfacing or restricting access to an external employee database.

EIn the Secure Store service application, define a target application by using an individual mapping.

An individual mapping in Secure Store maps stored credentials per user rather than per group, which does not restrict access exclusively to HR members and does not scale to a department-wide access requirement.

Concept tested: SharePoint external data access and Secure Store credential mapping

Source: https://learn.microsoft.com/en-us/sharepoint/administration/plan-the-secure-store-service

Topics

#Secure Store#external data access#group mapping#BCS

Community Discussion

No community discussion yet for this question.

Full 70-332 Practice