70-648 Question #68: Real Exam Question with Answer & Explanation

The correct answer is A. Register a service principal name (SPN) for AD RMS. D. Configure the useAppPoolCredentials attribute in the Internet Information Services (IIS) metabase.. If you plan to use Active Directory Rights Management Services (AD RMS) with Kerberos authentication, you must take additional steps to configure the server running AD RMS after installing the AD RMS server role and provisioning the server. Specifically, you must perform these pr

Question

Active Directory Rights Management Services (AD RMS) is deployed on your network. You need to configure AD RMS to use Kerberos authentication. Which two actions should you perform? (Each Answer presents part of the solution.Choose two.)

Options

ARegister a service principal name (SPN) for AD RMS.
BRegister a service connection point (SCP) for AD RMS.
CConfigure the identity setting of the _DRMSAppPool1 application pool.
DConfigure the useAppPoolCredentials attribute in the Internet Information Services (IIS) metabase.

Explanation

If you plan to use Active Directory Rights Management Services (AD RMS) with Kerberos authentication, you must take additional steps to configure the server running AD RMS after installing the AD RMS server role and provisioning the server. Specifically, you must perform these procedures: Set the Internet Information Services (IIS) useAppPoolCredentials variable to True Set the Service Principal Names (SPN) value for the AD RMS service account The Active Directory Rights Management Services (AD RMS) Service Connection Point (SCP) is an object in Active Directory that holds the web address of the AD RMS certification cluster. connectionpoint.aspx The RMS Web services run within the context of an IIS application pool(...)The application pool for the Web site you provision is called "_DRMSAppPool1."

Community Discussion

No community discussion yet for this question.

Full 70-648 Practice