70-648 · Question #23
Microsoft 70-648 Exam Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1. The Active Directory Federation Services (AD FS) role is…
The correct answer is D. an organization claim. When you use Active Directory Domain Services (AD DS) as the Active Directory Federation Services (AD FS) account store for an account Federation Service, you map an organization group claim to a security group in AD DS. This mapping is called a group claim extraction. Creating…
Question
Microsoft 70-648 Exam Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1. The Active Directory Federation Services (AD FS) role is installed on Server1. Contoso.com is defined as an account store. A partner company has a Web-based application that uses AD FS authentication. The partner company plans to provide users from contoso.com access to the Web application. You need to configure AD FS on contoso.com to allow contoso.com users to be authenticated by the partner company. What should you create on Server1?
Options
- Aa new application
- Ba resource partner
- Can account partner
- Dan organization claim
How the community answered
(56 responses)- A5% (3)
- B7% (4)
- C16% (9)
- D71% (40)
Explanation
When you use Active Directory Domain Services (AD DS) as the Active Directory Federation Services (AD FS) account store for an account Federation Service, you map an organization group claim to a security group in AD DS. This mapping is called a group claim extraction. Creating a resource partner or account partner is done during the setup up of the Federation We are not told that we need to create an application, rather, the partner company has the application that we need to use.
Topics
Community Discussion
No community discussion yet for this question.