nerdexam
Microsoft

70-466 · Question #14

You deploy a tabular model in DirectQuery mode to a server named Server1. Server1 has SQL Server Analysis Services (SSAS) installed. The model uses a relational data source named DB1. You need to…

The correct answer is A. Register a Service Principal Name (SPN) for Server1. This question tests how to enable Kerberos credential delegation from an SSAS DirectQuery server to a backend relational database. Registering an SPN for the SSAS server is the required prerequisite.

Configure and maintain an analysis services database

Question

You deploy a tabular model in DirectQuery mode to a server named Server1. Server1 has SQL Server Analysis Services (SSAS) installed. The model uses a relational data source named DB1. You need to ensure that Server1 passes the credentials of the current user browsing the model to DB1. What should you do?

Options

  • ARegister a Service Principal Name (SPN) for Server1.
  • BFrom the SQL Server Data Tools, modify the impersonation settings.
  • CFrom the Web.config file, modify the impersonation settings.
  • DRegister a Service Principal Name (SPN) for DB1.

How the community answered

(24 responses)
  • A
    54% (13)
  • B
    13% (3)
  • C
    25% (6)
  • D
    8% (2)

Why each option

This question tests how to enable Kerberos credential delegation from an SSAS DirectQuery server to a backend relational database. Registering an SPN for the SSAS server is the required prerequisite.

ARegister a Service Principal Name (SPN) for Server1.Correct

Registering a Service Principal Name (SPN) for Server1 enables Kerberos authentication for the SSAS service, which is a prerequisite for Kerberos constrained delegation. With delegation configured, Server1 can impersonate the currently browsing user and forward their credentials to DB1, enabling per-user data access in DirectQuery mode.

BFrom the SQL Server Data Tools, modify the impersonation settings.

Impersonation settings in SQL Server Data Tools configure the fixed service account SSAS uses to connect during processing, not the per-user credential pass-through required for DirectQuery mode.

CFrom the Web.config file, modify the impersonation settings.

Web.config is a configuration file for ASP.NET web applications and has no relevance to SSAS impersonation or Kerberos delegation settings.

DRegister a Service Principal Name (SPN) for DB1.

The SPN must be registered for Server1 (the SSAS service acting as the Kerberos delegation intermediary), not for DB1 - registering an SPN for DB1 alone does not grant Server1 the ability to delegate user credentials.

Concept tested: Kerberos SPN registration for SSAS credential delegation in DirectQuery

Source: https://learn.microsoft.com/en-us/analysis-services/instances/spn-registration-for-an-analysis-services-instance

Topics

#DirectQuery mode#SPN Kerberos delegation#impersonation#credential passthrough

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full 70-466 Practice