70-413 Exam Technology & Digital Applications 5 — Questions and Answers
Question 1: You are deploying an application that uses Windows Authentication. Remote users connect through a reverse proxy. Which IIS authentication configuration allows the proxy to pass the authenticated user identity to the backend?
- Configure IIS to use Windows Authentication with Kernel-mode disabled and enable Protocol Transition
- Enable Anonymous Authentication on the backend IIS server
- Use Basic Authentication over HTTPS on the backend
- Configure Constrained Delegation (S4U2Proxy) on the proxy server account (Correct answer)
Correct answer: Configure Constrained Delegation (S4U2Proxy) on the proxy server account
Constrained Delegation with S4U2Proxy allows the proxy server's computer account to impersonate authenticated users when forwarding requests to the backend IIS server.
Question 2: A line-of-business application stores data in a SQL Server database. You need to configure the IIS application pool to connect to SQL Server using Windows Authentication without storing credentials. Which identity should the application pool use?
- A domain service account with db_datareader/writer permissions on SQL Server (Correct answer)
- Network Service
- Local System
- ApplicationPoolIdentity with SQL Server login
Correct answer: A domain service account with db_datareader/writer permissions on SQL Server
A domain service account can be granted specific SQL Server permissions, allowing Windows Integrated Authentication from IIS to SQL Server without embedded credentials.
Question 3: Your organization is deploying a new internal application using HTTPS. The PKI team provides a certificate. After binding the certificate in IIS, HTTPS requests fail with SSL_ERROR_RX_RECORD_TOO_LONG. What is the most likely cause?
- The HTTPS binding is on the wrong port or HTTP traffic is hitting the HTTPS port (Correct answer)
- The certificate private key is missing
- The certificate chain is incomplete
- TLS 1.0 is disabled on the server
Correct answer: The HTTPS binding is on the wrong port or HTTP traffic is hitting the HTTPS port
SSL_ERROR_RX_RECORD_TOO_LONG typically means a plain HTTP request reached a port expecting SSL/TLS, indicating a misconfigured port binding or client URL.
Question 4: A Windows Server 2012 R2 application uses MSMQ for asynchronous messaging. After a server reboot, messages are lost. Which MSMQ queue type should be used to prevent this?
- Transactional queue with recoverable (persistent) messages (Correct answer)
- Private non-transactional queue
- Public queue in Active Directory
- Journal queue
Correct answer: Transactional queue with recoverable (persistent) messages
Transactional queues with recoverable messages write message data to disk, ensuring messages survive server reboots or crashes.
Question 5: You need to monitor an IIS web application for performance issues. Which Windows Server tool provides real-time performance counters for ASP.NET requests per second and request queue length?
- Performance Monitor (PerfMon) with ASP.NET and Web Service counter sets (Correct answer)
- Resource Monitor (ResMon)
- Task Manager Performance tab
- Windows Event Viewer Application log
Correct answer: Performance Monitor (PerfMon) with ASP.NET and Web Service counter sets
Performance Monitor provides detailed ASP.NET and IIS Web Service counter sets including requests/sec, queue length, and errors that Task Manager does not expose.
Question 6: An organization wants to use Windows Server 2012 R2 to deliver virtual desktops to thin clients. Which RDS deployment model streams a full desktop from a shared OS session to multiple users?
- Session-based desktop deployment using RD Session Host (Correct answer)
- Virtual machine-based desktop deployment using RD Virtualization Host
- RemoteApp deployment
- RD Web Access with RD Gateway
Correct answer: Session-based desktop deployment using RD Session Host
Session-based desktops use RD Session Host, where multiple users share a single OS instance with isolated sessions, making it more resource-efficient than per-user VMs.
Question 7: A company is migrating an application to Windows Server 2012 R2 and needs to ensure the application can write to a legacy registry key under HKLM. The application runs as a standard user. Which technology provides virtualization of registry writes for compatibility?
- UAC virtualization redirects HKLM writes to the user's HKCU hive for non-elevated processes (Correct answer)
- Application Compatibility Toolkit (ACT) shims
- Registry key ACL granting Users write permission
- Running the application as a local administrator
Correct answer: UAC virtualization redirects HKLM writes to the user's HKCU hive for non-elevated processes
UAC file and registry virtualization silently redirects HKLM writes from non-elevated legacy applications to a per-user virtualized store, maintaining compatibility without privilege escalation.
70-413 Exam Technology & Digital Applications 5
You are deploying an application that uses Windows Authentication.
Remote users connect through a reverse proxy.
Which IIS authentication configuration allows the proxy to pass the authenticated user identity to the backend?