A portal administrator is trying to enable web-tier authentication (IWA) for the ArcGIS Enterprise portal using Active Directory and IIS.
Steps taken:
Configured portal with Microsoft version of ArcGIS Web Adaptor
Set identity store to Active Directory
Added AD users to the portal
Disabled anonymous access in Portal
Users are not prompted to sign in and are not automatically logged in.
What should the administrator do next?
When using IWA through the Web Adaptor (IIS), the IIS server itself must be configured to deny anonymous access and allow Windows Authentication. Simply disabling anonymous access within the Portal settings is not enough.
From Esri's web-tier authentication guide:
''For IWA to function as expected, anonymous access must be disabled in IIS for the ArcGIS Web Adaptor, and Windows Authentication must be enabled. If IIS still allows anonymous access, users will bypass authentication prompts.''
Option B is irrelevant here---user types don't affect login behavior.
Option C is a content sync feature, not related to authentication.
Option D (Enable Windows Authentication) is correct only if it hasn't already been done, but the missing step is disabling anonymous access in IIS.
ArcGIS Enterprise -- Configuring Web-Tier Authentication with IIS
An ArcGIS Enterprise administrator wants to publish their feature classes as layers in bulk from a registered geodatabase.
Which action should the administrator perform?
To publish feature classes as services in bulk from an enterprise geodatabase, it must first be registered with the ArcGIS Server site. This registration tells ArcGIS Server where to access the data directly for referenced service publishing. The proper way to do this is through ArcGIS Server Manager.
From ArcGIS Enterprise documentation:
''To publish layers directly from a registered enterprise geodatabase without copying data, you must register the geodatabase with your ArcGIS Server site using ArcGIS Server Manager.''
Option B is used for hosted services, not referenced publishing.
Option C is not the correct interface for registering data sources.
Option D involves hosting data, which is not applicable for referenced layers from a geodatabase.
ArcGIS Server -- Registering Data Stores for Publishing Referenced Services
=====================
A GIS administrator is responsible for maintaining the stability of a large internal ArcGIS Enterprise deployment. After the Domain CA certificate is replaced with a new one and the new PKCS#12 format PFX file is imported into all Portal for ArcGIS, ArcGIS Server, and ArcGIS Data Store deployments, the following issues are identified:
When connecting directly to the Portal for ArcGIS administration endpoint via port 7443, the new certificate is not recognized and is considered invalid
When connecting directly to the ArcGIS Server administration endpoint via port 6443, the new certificate is not recognized and is considered invalid
When connecting to the ArcGIS Data Store endpoint via port 2443, the new certificate is recognized and considered valid
What is causing this issue?
When replacing SSL certificates in ArcGIS Enterprise components, ArcGIS Server and Portal for ArcGIS require the root and intermediate (issuing) certificates to be explicitly imported into their trust stores. Unlike the ArcGIS Data Store, which can often rely on the system-level trust store, ArcGIS Server and Portal maintain their own certificate trust management.
From the official ArcGIS Enterprise documentation:
''When using certificates issued by an internal or external CA, it is essential to also import the corresponding root and intermediate certificates into the Portal for ArcGIS and ArcGIS Server trust stores to ensure the certificate chain is validated properly.''
Option B is incorrect. Domain CA certificates are supported and recommended over self-signed certificates for internal deployments.
Option C refers to an acceptable format but does not address the issue, which is about importing the chain of trust.
Option D is incorrect; PKCS#12 (.pfx) certificates are supported but must be paired with the correct chain files.
ArcGIS Enterprise -- Managing CA certificates in Portal and ArcGIS Server environments
=====================
A client wants to perform incremental webgisdr backups daily and full backups weekly. They store all data in the relational ArcGIS Data Store, with no tile or map caches.
Which action is required to enable incremental backups?
To perform incremental backups using the webgisdr tool, point-in-time recovery must be enabled on the relational data store. This creates transaction logs needed for differential backups and aligns with best practices for enterprise-level backup strategies.
From Esri documentation:
''Incremental backups can only be used with a relational data store when point-in-time recovery is enabled. This enables transaction log capture needed for delta backups.''
Option A is unrelated to backup functionality.
Option C is not required unless performance tuning is needed.
ArcGIS Enterprise -- Enabling Point-in-Time Recovery in ArcGIS Data Store for Incremental Backups
=====================
A GIS administrator is responsible for maintaining the stability of a large internal ArcGIS Enterprise deployment. After the Domain CA certificate is replaced with a new one and the new PKCS#12 format PFX file is imported into all Portal for ArcGIS, ArcGIS Server, and ArcGIS Data Store deployments, the following issues are identified:
When connecting directly to the Portal for ArcGIS administration endpoint via port 7443, the new certificate is not recognized and is considered invalid
When connecting directly to the ArcGIS Server administration endpoint via port 6443, the new certificate is not recognized and is considered invalid
When connecting to the ArcGIS Data Store endpoint via port 2443, the new certificate is recognized and considered valid
What is causing this issue?
When replacing SSL certificates in ArcGIS Enterprise components, ArcGIS Server and Portal for ArcGIS require the root and intermediate (issuing) certificates to be explicitly imported into their trust stores. Unlike the ArcGIS Data Store, which can often rely on the system-level trust store, ArcGIS Server and Portal maintain their own certificate trust management.
From the official ArcGIS Enterprise documentation:
''When using certificates issued by an internal or external CA, it is essential to also import the corresponding root and intermediate certificates into the Portal for ArcGIS and ArcGIS Server trust stores to ensure the certificate chain is validated properly.''
Option B is incorrect. Domain CA certificates are supported and recommended over self-signed certificates for internal deployments.
Option C refers to an acceptable format but does not address the issue, which is about importing the chain of trust.
Option D is incorrect; PKCS#12 (.pfx) certificates are supported but must be paired with the correct chain files.
ArcGIS Enterprise -- Managing CA certificates in Portal and ArcGIS Server environments
=====================
Margaret Sanchez
12 hours agoDennis Brown
21 days agoElizabeth King
28 days agoStephanie Sanchez
2 months agoElizabeth Nguyen
1 month agoCharles Baker
1 month agoAndrew Young
26 days agoCynthia Flores
1 month agoRebecca Flores
1 month agoNada
2 months agoPearline
2 months agoAliza
3 months agoIsreal
3 months agoRoxane
3 months agoGennie
3 months agoRueben
4 months agoReita
4 months agoIvette
4 months agoLashandra
4 months agoLang
5 months agoAshlee
5 months agoCassie
5 months agoSkye
5 months agoWhitney
6 months agoTijuana
6 months agoYvonne
6 months agoErnie
6 months agoSelma
7 months agoScarlet
7 months agoDenise
7 months agoXochitl
7 months agoElouise
8 months agoGlendora
8 months agoShaquana
8 months agoLang
8 months agoClaudia
9 months agoGlory
9 months agoLizbeth
9 months agoMabelle
9 months agoIrma
9 months agoIlene
9 months ago