Your company has an Active Directory forest that contains a single domain. The domain member server has an Active Directory Federation Services (AD FS) server role installed. You need to configure…

Question

Options

• AAdd and configure a new account store.
• BAdd and configure a new account partner.
• CAdd and configure a new resource partner.
• DAdd and configure a Claims-aware application.

• A
  75% (12)
• B
  6% (1)
• C
  13% (2)
• D
  6% (1)

Explanation

To configure the AD FS trust policy to populate AD FS tokens with employee's information from Active directory domain, you need to add and configure a new account store. AD FS allows the secure sharing of identity information between trusted business partners across an extranet. When a user needs to access a Web application from one of its federation partners, the user's own organization is responsible for authenticating the user and providing identity information in the form of "claims" to the partner that hosts the Web application. The hosting partner uses its trust policy to map the incoming claims to claims that are understood by its Web application, which uses the claims to make authorization decisions. Because claims originate from an account store, you need to configure account store to configure the AD FS trust policy.

No community discussion yet for this question.