Identity with Windows Server 2016 — Question 4

Your network contains an Active Directory domain named contoso.com. The domain contains an Active Directory Federation Services (AD FS) server named
ADFS1, a Web Application Proxy server named WAP1, and a web server named Web1.
You need to publish a website on Web1 by using the Web Application Proxy. Users will authenticate by using OAuth2 preauthentication.
What should you do first?

Answer options

• A. On Web1, add site bindings.
• B. On Web1, add handler mappings.
• C. On ADFS1, enable an endpoint.
• D. On ADFS1, add a claims provider trust.

Correct answer: C

Explanation

The correct first step is to enable an endpoint on ADFS1, as this configuration is necessary for OAuth2 preauthentication to function properly. The other options, such as adding site bindings or handler mappings on Web1, do not directly pertain to the OAuth2 authentication process and will not initiate the publishing process effectively.