nerdexam
Microsoft

70-332 · Question #21

A company has two SharePoint farms as described in the following table. HRFarm: https://hrweb.tailspintoys.com FinanceFarm: https://finweb.tailspintoys.com You need to process incoming server…

The correct answer is A. Configure both farms to use Secure Sockets Layer (SSL) connections. C. Run the Windows PowerShell cmdlet New-SPTrustedSecureTokenIssuer on a server in HRFarm. D. Log on as a member of the Administrators group on a server in HRFarm. Establishing a cross-farm server-to-server trust so HRFarm can process requests from FinanceFarm requires SSL, registering FinanceFarm as a trusted token issuer on HRFarm, and local administrator rights to run the required cmdlets.

Configure and manage SharePoint environment

Question

A company has two SharePoint farms as described in the following table. HRFarm: https://hrweb.tailspintoys.com FinanceFarm: https://finweb.tailspintoys.com You need to process incoming server requests on HRFarm that originate from FinanceFarm. What should you do? (Each correct answer presents part of the solution. Choose all that apply.)

Options

  • AConfigure both farms to use Secure Sockets Layer (SSL) connections.
  • BRun the Windows PowerShell cmdlet New-SPTrustedSecureTokenIssuer on a server in FinanceFarm.
  • CRun the Windows PowerShell cmdlet New-SPTrustedSecureTokenIssuer on a server in HRFarm.
  • DLog on as a member of the Administrators group on a server in HRFarm.
  • ERun the Windows PowerShell cmdlet Get-SPTrustedSecurityTokenIssuer -Identity FarmA on a server in HRFarm.

How the community answered

(66 responses)
  • A
    68% (45)
  • B
    23% (15)
  • E
    9% (6)

Why each option

Establishing a cross-farm server-to-server trust so HRFarm can process requests from FinanceFarm requires SSL, registering FinanceFarm as a trusted token issuer on HRFarm, and local administrator rights to run the required cmdlets.

AConfigure both farms to use Secure Sockets Layer (SSL) connections.Correct

SSL is mandatory for cross-farm server-to-server authentication because SharePoint's OAuth-based token exchange between farms requires HTTPS to securely transmit security tokens without interception.

BRun the Windows PowerShell cmdlet New-SPTrustedSecureTokenIssuer on a server in FinanceFarm.

New-SPTrustedSecureTokenIssuer must be executed on the farm receiving and processing the requests (HRFarm), not on the originating farm - running it on FinanceFarm would configure trust in the wrong direction and would not enable HRFarm to accept FinanceFarm tokens.

CRun the Windows PowerShell cmdlet New-SPTrustedSecureTokenIssuer on a server in HRFarm.Correct

Running New-SPTrustedSecureTokenIssuer on HRFarm registers FinanceFarm's token service as a trusted issuer, which explicitly instructs HRFarm to accept and honor authentication tokens originating from FinanceFarm for incoming requests.

DLog on as a member of the Administrators group on a server in HRFarm.Correct

Local Administrator group membership on an HRFarm server is required to execute SharePoint management shell cmdlets that modify farm-level trust configuration, as standard SharePoint farm admin rights alone are insufficient for these operations.

ERun the Windows PowerShell cmdlet Get-SPTrustedSecurityTokenIssuer -Identity FarmA on a server in HRFarm.

Get-SPTrustedSecurityTokenIssuer is a read-only cmdlet that retrieves information about already-configured trusted token issuers and does not create or establish any new trust relationship.

Concept tested: SharePoint cross-farm server-to-server trust with OAuth token issuers

Source: https://learn.microsoft.com/en-us/sharepoint/administration/configure-server-to-server-authentication-between-publishing-and-consuming-farms

Topics

#server-to-server authentication#SPTrustedSecureTokenIssuer#farm trust#SSL

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full 70-332 Practice