70-467J Real Exam Prep DEMO

Question 5: SSASに接続し、ダウンタイムを最小限に抑えるために、SSRS01上のSSRSインスタンスの
セキュリティを構成必要があります。
何をするべきですか。(各正解はソリューションの一部を紹介します。該当するものをすべ
て選択してください。)
A. レポートサーバーサービスのサービスプリンシパル名を登録します。
B. IISサービスを再起動します。
C. Analysis Servicesサービスのサービスプリンシパル名を登録します。
D. ネゴシエート認証タイプを使用するようにSSRS01を構成します。
E. カスタム認証タイプを使用するようにSSRS01を構成します。
Correct Answer: A,D
Explanation
A (not B): If you are deploying Reporting Services in a network that uses the Kerberos
protocol for mutual authentication, you must create a Service Principal Name (SPN) for the
Report Server service if you configure it to run as a domain user account.
D (not E):
* See step 6 below.
To register an SPN for a Report Server service running as a domain user
* Install Reporting Services and configure the Report Server service to run as a domain user
account. Note that users will not be able to connect to the report server until you complete
the following steps.
* Log on to the domain controller as domain administrator.
* Open a Command Prompt window.
* Copy the following command, replacing placeholder values with actual values that are valid
for your network:
* Setspn -a http/<computer-name>.<domain-name>:<port><domain-user-account>
* Run the command.
* Open the RsReportServer.config file and locate the <AuthenticationTypes> section. Add
<RSWindowsNegotiate/> as the first entry in this section to enable NTLM.
* RSWindowsNegotiate. If you initially set the Windows service account for the report server
to NetworkService or LocalSystem in Reporting Services Configuration Manager,
RSWindowsNegotiate is added to the RSReportServer.config file as the default setting. With
this setting, the report server can accept requests from client applications requesting
Kerberos or NTLM authentication. If Kerberos is requested and the authentication fails, the
report server switches to NTLM authentication and prompts the user for credentials unless
the network is configured to manage authentication transparently.
Using RSWindowsNegotiate is your best option because it provides the greatest flexibility for
multiple clients in an intranet environment.
Not C: IIS is not mention in this scenario.
Note:
* From scenario:
/ A single-server deployment of SQL Server 2008 R2 Reporting Services (SSRS) in native
mode is installed on a server named SSRS01. The Reporting Server service is configured to
use a domain service account.
Reference: Register a Service Principal Name (SPN) for a Report Server