nerdexam
Microsoft

70-332 · Question #28

You are configuring a SharePoint environment to support SharePoint apps for Litware, Inc. The SharePoint servers use a load balancer for incoming requests. You need to ensure that all connections to…

The correct answer is A. Create a DNS CNAME record forsc.LitwareApps.com C. Create a wildcard SSL certificate for *.LitwareApps.com. D. Create a DNS forward lookup zone for the LitwareApps.com domain. Hosting SharePoint apps on a separate domain with a wildcard SSL certificate and correct DNS configuration ensures all dynamically generated app subdomains are encrypted and resolvable through the load balancer.

Configure and manage SharePoint environment

Question

You are configuring a SharePoint environment to support SharePoint apps for Litware, Inc. The SharePoint servers use a load balancer for incoming requests. You need to ensure that all connections to the SharePoint servers are secure and encrypted. What should you do? (Each correct answer presents a part of the solution. Choose all that apply.)

Exhibit

70-332 question #28 exhibit

Options

  • ACreate a DNS CNAME record forsc.LitwareApps.com
  • BCreate a SSL certificate for the AppHost.LitwareApps.com domain.
  • CCreate a wildcard SSL certificate for *.LitwareApps.com.
  • DCreate a DNS forward lookup zone for the LitwareApps.com domain.
  • ECreate a DNS A record for AppHost.LitwareApps.com that points to the IP address of the load- balancer.

How the community answered

(25 responses)
  • A
    64% (16)
  • B
    24% (6)
  • E
    12% (3)

Why each option

Hosting SharePoint apps on a separate domain with a wildcard SSL certificate and correct DNS configuration ensures all dynamically generated app subdomains are encrypted and resolvable through the load balancer.

ACreate a DNS CNAME record forsc.LitwareApps.comCorrect

A DNS CNAME record for sc.LitwareApps.com creates the service connection alias required for the SharePoint app domain, enabling proper routing for app-related service calls.

BCreate a SSL certificate for the AppHost.LitwareApps.com domain.

A single SSL certificate for AppHost.LitwareApps.com covers only that one specific hostname and cannot secure the dynamically generated unique subdomains SharePoint assigns to each installed app, making a wildcard certificate necessary instead.

CCreate a wildcard SSL certificate for *.LitwareApps.com.Correct

A wildcard SSL certificate for *.LitwareApps.com covers all dynamically generated app subdomains - since each app receives a unique subdomain - ensuring every app connection is encrypted without requiring individual certificates per app.

DCreate a DNS forward lookup zone for the LitwareApps.com domain.Correct

A DNS forward lookup zone for LitwareApps.com must exist so the DNS server can resolve any hostname within that domain, including the wildcard app subdomains that SharePoint generates at runtime.

ECreate a DNS A record for AppHost.LitwareApps.com that points to the IP address of the load- balancer.

An A record for the static hostname AppHost.LitwareApps.com addresses only that single endpoint, while SharePoint apps require wildcard DNS support to resolve the unique per-app subdomains that are created dynamically.

Concept tested: SharePoint app domain DNS and wildcard SSL setup

Source: https://learn.microsoft.com/en-us/sharepoint/administration/configure-an-environment-for-apps-for-sharepoint

Topics

#wildcard SSL certificate#DNS configuration#app hosting#load balancer

Community Discussion

No community discussion yet for this question.

Full 70-332 Practice