A GIS administrator is setting up a distributed collaboration between an ArcGIS Online organization and an ArcGIS Enterprise organization for a data validation project. Users from a second ArcGIS Online org will also participate.What should the administrator set up?
Answer(s): A
A distributed collaboration in ArcGIS Enterprise is designed to operate between two organizations only. Therefore, to collaborate with two separate ArcGIS Online organizations, the administrator must create separate collaborations between the Enterprise org and each ArcGIS Online org.From Esri documentation:"Each collaboration is established between two organizations. To collaborate with multiple organizations, you must set up multiple one-to-one collaborations."Option B is incorrect because adding external users from other orgs to a group doesn't extend collaboration capabilities.Option C is not supported -- collaborations are strictly between two parties.
ArcGIS Enterprise Distributed Collaboration Limitations and Multi-Org Setup
A client requires an ArcGIS Server site with the ability to:Serve cached image services updated annuallyServe dynamic feature services from a PostgreSQL enterprise geodatabaseWhich ArcGIS Server license role is required?
Answer(s): B
To publish and serve cached image services, the ArcGIS Server must be licensed as an Image Server. This licensing role is designed specifically for serving raster datasets, image services, and cache-based imagery workflows.From ArcGIS Server documentation:"The Image Server role is required to publish and manage image services, including those that serve pre-generated tile caches and support raster analytics."Option A (GIS Server) supports feature and map services, but not cached imagery.Option C (Mission Server) is for real-time operations, unrelated to imagery or features.
ArcGIS Enterprise Server Roles and Functionality (Image Server)
A GIS administrator must configure ArcGIS Server so that only specific groups and roles from the identity store can administer it.Which action should the administrator perform?
The primary site administrator account in ArcGIS Server is a built-in account that bypasses external identity store configurations. To ensure only users from a configured identity store (e.g., Active Directory) can administer the site, the primary site admin account must be disabled after alternative administrative access has been confirmed.From ArcGIS Server documentation:"After you configure your ArcGIS Server to use users and roles from an identity store (LDAP or Active Directory), you can disable the primary site administrator account to prevent bypassing the identity store."Option B relates to token security, not access control.Option C is about running the service securely, not defining user permissions.
ArcGIS Enterprise Managing Access Using Identity Stores and Disabling the Primary Site Administrator Account
Portal for ArcGIS is running in a Windows environment.Which type of account is recommended to run the Portal for ArcGIS service?
Esri recommends using a Group Managed Service Account (gMSA) to run Portal for ArcGIS services in Windows environments. gMSAs automatically manage passwords, align with Active Directory policies, and are ideal for enterprise-scale deployments.From Esri documentation:"Using a group managed service account (gMSA) to run Portal for ArcGIS services improves security by allowing Windows to manage the password, reducing administrative overhead while meeting enterprise security requirements."Option B (regular AD account) is acceptable but requires manual password updates.Option C and D are not secure or scalable for enterprise environments.
ArcGIS Enterprise Service Account Recommendations for Windows Environments
A GIS administrator is installing Portal for ArcGIS and ArcGIS Server on separate machines. They need services to run continuously and comply with enterprise password policies.Which account should be used to deploy the software?
For multi-machine deployments, a Group Managed Service Account (gMSA) is the best option. It supports running services across multiple servers without requiring manual password updates, making it ideal for high-availability and enterprise security compliance.From Esri's deployment guidance:"Use a group managed service account (gMSA) when installing ArcGIS Enterprise on multiple machines. gMSAs allow centralized password management and seamless cross-machine authentication."Option A could lead to password expiration issues.Option C lacks centralized management and complicates maintenance.
ArcGIS Enterprise Multi-Machine Installations and Secure Service Account Practices
Post your Comments and Discuss Esri EAEP2201 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the EAEP2201 content, but please register or login to continue.