An organization configures an ArcGIS Enterprise portal to allow single sign-on using Integrated Windows Authentication (IWA). Configuration includes:All accounts in the Active Directory group gisusers are added to the portalExisting users can sign in without entering credentialsHowever, new employees assigned to the same gisusers group cannot log in, create content, or join groups.What is causing this issue for the new employees?
Answer(s): B
A portal administrator is trying to enable web-tier authentication (IWA) for the ArcGIS Enterprise portal using Active Directory and IIS.Steps taken:Configured portal with Microsoft version of ArcGIS Web AdaptorSet identity store to Active DirectoryAdded AD users to the portalDisabled anonymous access in PortalUsers are not prompted to sign in and are not automatically logged in.What should the administrator do next?
Answer(s): A
When using IWA through the Web Adaptor (IIS), the IIS server itself must be configured to deny anonymous access and allow Windows Authentication. Simply disabling anonymous access within the Portal settings is not enough.From Esri's web-tier authentication guide:"For IWA to function as expected, anonymous access must be disabled in IIS for the ArcGIS WebAdaptor, and Windows Authentication must be enabled. If IIS still allows anonymous access, users will bypass authentication prompts."Option B is irrelevant here--user types don't affect login behavior.Option C is a content sync feature, not related to authentication.Option D (Enable Windows Authentication) is correct only if it hasn't already been done, but the missing step is disabling anonymous access in IIS.
ArcGIS Enterprise Configuring Web-Tier Authentication with IIS
An ArcGIS Enterprise administrator wants to publish their feature classes as layers in bulk from a registered geodatabase.Which action should the administrator perform?
To publish feature classes as services in bulk from an enterprise geodatabase, it must first be registered with the ArcGIS Server site. This registration tells ArcGIS Server where to access the data directly for referenced service publishing. The proper way to do this is through ArcGIS Server Manager.From ArcGIS Enterprise documentation:"To publish layers directly from a registered enterprise geodatabase without copying data, you must register the geodatabase with your ArcGIS Server site using ArcGIS Server Manager."Option B is used for hosted services, not referenced publishing.Option C is not the correct interface for registering data sources.Option D involves hosting data, which is not applicable for referenced layers from a geodatabase.
ArcGIS Server Registering Data Stores for Publishing Referenced Services
A client has an internet-accessible ArcGIS Enterprise deployment with the Web Adaptors in the DMZ, and the remaining components are on an internal network behind a firewall. A user on the internet must access a web map in that environment.Which ports must be open in the firewall between the DMZ and the internal network?
Answer(s): C
An organization experiences a temporary loss of service for its ArcGIS Enterprise deployment due to expired licenses.What should the administrator have done to prevent this issue?
Post your Comments and Discuss Esri EAEP2201 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the EAEP2201 content, but please register or login to continue.