70-450 · Question #129
You are a professional level SQL Sever 2008 Database Administrator. An authentication method should be designed for SSRS reports that SQL Server data connections are utilized. Since you are the…
The correct answer is C. A service principal name (SPN) should be registered in the Active Directory directory service. Configuring SSRS authentication can be surprisingly challenging. There's an article dedicated to it on MSDN. ----------------------------- A service principal name (SPN} is the name by which a client uniquely identifies an instance of a service. The Kerberos authentication…
Question
You are a professional level SQL Sever 2008 Database Administrator. An authentication method should be designed for SSRS reports that SQL Server data connections are utilized. Since you are the technical support of the company, you are required to make sure that all SSRS reports utilize the Kerberos authentication protocol to communicate to the SQL Server instance. Which action should you perform?
Options
- AThe default Web site should be set on the instance to utilize the Integrated Security type.
- BThe application pool utilized by the default Web site should be set to utilize a domain account.
- CA service principal name (SPN) should be registered in the Active Directory directory service
- DThe default Web site on the instance should be set to utilize the Secure Sockets Layer (SSL)
How the community answered
(22 responses)- A5% (1)
- B14% (3)
- C77% (17)
- D5% (1)
Explanation
Configuring SSRS authentication can be surprisingly challenging. There's an article dedicated to it on MSDN. ----------------------------- A service principal name (SPN} is the name by which a client uniquely identifies an instance of a service. The Kerberos authentication service can use an SPN to authenticate a service. When a client wants to connect to a service, it locates an instance of the service, composes an SPN for that instance, connects to the service, and presents the SPN for the service to authenticate. To register the SPN, the Database Engine must be running under a built-in account, such as Local System or NETWORK SERVICE, or an account that has permission to register an SPN, such as a domain administrator account. It SOL Server is not running under one of these accounts, the SPN is not registered at startup and the domain administrator must register the SPN manually. More in BOL
Topics
Community Discussion
No community discussion yet for this question.