Free 70-466 Sample Question 11
You need to configure per-user security authentication for reporting against the Sales cube.
What should you do? (Each correct answer presents part of the complete solution. Choose all that apply.)
A. Install PowerPivot.
B. Create Service Principal Names (SPNs).
C. Configure account delegation.
D. Set up the Unattended Service Account.
Correct Answer: A,B
* From scenario:
/ Administrative staff from around the world will produce sales reports with Microsoft Excel 2010 based on the Sales cube.
/ Security requirements
When possible, the system must use Windows authentication for all database connections.
The system must prevent users from querying data from outside of their region.
The system must allow certain users to query data from multiple regions.
B: To use Kerberos authentication with SQL Server requires both the following conditions to be true: The client and server computers must be part of the same Windows domain, or in trusted domains. A Service Principal Name (SPN) must be registered with Active Directory, which assumes the role of the Key Distribution Center in a Windows domain. The SPN, after it is registered, maps to the Windows account that started the SQL Server instance service. If the SPN registration has not been performed or fails, the Windows security layer cannot determine the account associated with the SPN, and Kerberos authentication will not be used.