You need to configure the IIS and SQL Server 2000 computers to allow access to data by means of the IIS virtual directory. IIS uses Basic Authentication to allow access to the virtual directory.
Only company partners should have access to the SQL Server computer by means of the Internet. The partners should not be allowed to make ad hoc queries. You want to be able to audit successful and failed logins to the SQL Server computer.
You want to allow the partners access to the SQL Server computer while keeping your security scheme as simple as possible. Which two actions should you take? (Each correct answer represents part of the solution. Choose two.)
A．Configure the IIS virtual directory to allow URL queries.
B．Configure the IIS virtual directory to allow template queries.
C．Create a new Windows user account. Create a corresponding Windows Authenticated login on the SQL Server computer. Configure the IIS virtual directory to always use this login when connecting to the SQL Server computer.
D．Create a Windows Authenticated login on the SQL Server computer for the IIS Internet Guest Account. Configure the IIS virtual directory to always use the Internet Guest Account when connecting to the SQL Server computer.
E．Create a Windows Authenticated login for each company partner on the SQL Server computer. Configure the IIS virtual directory to use Windows Integrated Authentication when connecting to the SQL Server computer.
参考答案
正确答案：BE
解析：Explanation:B:TheAllowTemplateQueriesoptionletsyoucreateXMLtemplatesthatcontainSQLstatements,whichcanbeusedtoreturndataasXML.Nobrowserwouldberequired,thoughyoucouldcertainlyuseone.Apossiblenon-browserclientcouldbeaVisualBasicapplicationforexample.E:IfyouforcetheuserstoauthenticatethemselvesviaBasicauthentication,IIShasallinformationrequiredtomakethetrustedconnectiontoSQLServer.WesetupIIStouseWindowsIntegratedAuthenticationwhenconnectingtotheSQLServer.WindowsAuthenticationloginsmustbecreatedontheSQLServeraswell.Incorrectanswers:A:URLqueriesallowexecutionofSQLqueriesdirectlyintheURL.Thiswouldrequireabrowserhowever,butnotallpartnersusebrowsers.Note:TheAllowURLQueriesoptionletsyoutypeSelectstatementsdirectlyinthebrowserandreturnthedataasXML.C:TheInternetGuestAccount,notaspecificWindowsaccount,shouldbeusedtoconnecttotheSQLServerfromtheIISserver.D:WeshouldnotallowaccesstotheSQLServerfortheIISInternetGuestaccount.ThatwouldallowallpeopleconnectingtotheIISserveraccesstotheSQLServeraswell.