Designing and Implementing a Server Infrastructure — Question 31

A company has a line-of-business application named App1 that runs on an internal IIS server. App1 uses a SQL Server 2008 database that is hosted on the same server. You move the database to a dedicated SQL Server named SQL1.
Users report that they can no longer access the application by using their domain credentials.
You need to ensure that users can access App1.
Solution: You configure Kerberos-constrained delegation and then run the following command from an administrative command prompt: setspn-a MSSQLsvc/SQLl:1433 <domain>\<sql_service>
Does this meet the goal?

Answer options

Correct answer: A

Explanation

Configuring Kerberos-constrained delegation and using the setspn command allows the application to authenticate users properly against the new SQL Server. This setup is necessary for applications to delegate credentials securely when accessing SQL Server resources, thus resolving the users' access issue. The alternative option does not provide a solution to the problem.