Does this meet the goal?

You plan to allow users to run internal applications from outside the company’s network. You have a Windows Server 2012 R2 that has the Active Directory Federation Services (AD FS) role installed. You must secure on-premises resources by using multi-factor authentication (MFA). You need to design a solution to enforce different access levels for users with personal Windows 8.1 or iOS 8 devices.

Solution: You install a local instance of MFA Server. You connect the instance to the Microsoft Azure MFA provider, and then run the following Windows PowerShell cmdlet.

Enable-AdfsDeviceRegistration

Does this meet the goal?
A . Yes
B . No

Answer: B

Explanation:

We must install AD FS Adapter, not register a host for the Device Registration Service.

Note: The Enable-AdfsDeviceRegistration cmdlet configures a server in an Active Directory Federation Services (AD FS) farm to host the Device Registration Service.

Reference: Using Multi-Factor Authentication with Windows Server 2012 R2 AD FS

https://msdn.microsoft.com/en-us/library/azure/dn807157.aspx

Subscribe
Notify of
guest
0 Comments
Inline Feedbacks
View all comments