70 - 667 Exam question confusion

Question

I am bit confused with this question for 70 - 667 exam question, seems like there are more then 1 right answer to the question.

You configure a SharePoint Server 2010 Service Pack 1 (SP1) farm. You want to provide access to non Active Diretory Users. You need to provision permissions to the users. what should you do?

1. Set claims-based authentication
2. Set classic mode authentication
3. Run the ASP.NET SQL Server Setup Wizard.
4. Run the SQL server import and export wizard.
5. Grant site collection permissions to all user by conducting a user import.
6. Grant web application permissions and zone-level permissions to users within the Microsoft SQL Server database of the extended web application.
7. Configure the membership provider and role manager for the web application.
8. Configure the membership provider and role manager for the Central Admin web application.

I am not really sure what they meant by "You need to provision permissions to the users."

How is Number 1, 3, 6, 7 and 8 are different ?

Please don't provide any links just explanation will be enough and I already went through Course work.

Just to let you know claimed answer is number 6 according to practising exam.

Answer 1

The key for this question is how do you configure Forms Based Authentication?. In order to make FBA work, you need to add the membership provider and the role manager to the web applications web.config on each front end server in the SharePoint farm.

So why are the other answers incorrect?

1. Claims based authentication could be from any other source, but it could also be active directory users.
2. Classic mode authentication are NTML or Kerberos, both using active directory.
3. ASP.NET SQL Server Setup has nothing to do with this question.
4. SQL server import and export wizard has nothing to do with this question.
5. This is somewhat correct, but only after configuration. A better approach would be to create a user policy for the users. And this question is about configuration of FBA.
6. Content access should go through the SharePoint's managed account for this purpose, and never ever user accounts.
7. This is exactly how you enable support for FBA
8. This is the correct approach, but for the wrong web application. Therefore, the alternative is wrong. Plus, CA should not be available to regular users.