70-339 · Question #115
You are an administrator for an on-premises SharePoint 2016 farm. A partner organization needs access to some of the resources in the farm. The partner organization does not use Windows Active…
The correct answer is A. Configure forms-based authentication. SharePoint 2016 supports multiple authentication providers, and the scenario requires a method that works without Active Directory, certificates, or PKI - pointing to forms-based authentication using a custom membership provider backed by the supplied user list.
Question
You are an administrator for an on-premises SharePoint 2016 farm. A partner organization needs access to some of the resources in the farm. The partner organization does not use Windows Active Directory and does not have third-party signed certificates. The partner organization does not have the personnel or expertise to set up and manage a public key infrastructure (PKI). The partner organization can supply you with a file that lists the users who need access to your SharePoint farm. All access to SharePoint resources must be authenticated. You need to configure authentication for the partner organization. What should you do?
Options
- AConfigure forms-based authentication.
- BConfigure a federated relying party trust.
- CConfigure a cross-forest trust.
- DConfigure anonymous access.
How the community answered
(35 responses)- A80% (28)
- B6% (2)
- C11% (4)
- D3% (1)
Why each option
SharePoint 2016 supports multiple authentication providers, and the scenario requires a method that works without Active Directory, certificates, or PKI - pointing to forms-based authentication using a custom membership provider backed by the supplied user list.
Forms-based authentication (FBA) in SharePoint 2016 uses ASP.NET membership and role providers, allowing administrators to authenticate users against a custom data store such as a SQL database populated from the partner-supplied user file. It requires no Active Directory, no certificates, and no PKI infrastructure on the partner side, satisfying all stated constraints while still enforcing authentication.
A federated relying party trust requires a federation service such as ADFS and relies on certificate-based token signing, which the partner organization cannot support due to lacking PKI.
A cross-forest trust is an Active Directory feature that requires both organizations to have AD forests, which the partner does not have.
Anonymous access does not authenticate users at all, directly violating the requirement that all access must be authenticated.
Concept tested: SharePoint forms-based authentication with custom membership provider
Source: https://learn.microsoft.com/en-us/sharepoint/security-for-sharepoint-server/plan-user-authentication
Topics
Community Discussion
No community discussion yet for this question.