SharePoint Server 2013 Kerberos Authentication in DMZ

I am trying to setup SharePoint Server 2013 in DMZ and I do have a problem when using Kerberos Authentication. The following are my questions/concerns/issues:

1. Why is Anonymous Access & Forms Based Authentication enabled by default?

2. People picker doesn't work if Anonymous Access is disabled.

3. Is there a white paper which describes the process of configuring Kerberos in DMZ? I know there is one for SharePoint Server 2010 but it never mentioned about DMZ.

Thanks,

Sunny