Exam SC-300 topic 2 question 35 discussion

EPA can be used with both Azure AD Joined and Azure AD Registered devices. The Global Secure Access client can be deployed on various platforms, including Windows, macOS, iOS, Android, and Linux. In this scenario: Device1 (Windows 11, Microsoft Entra registered) Device2 (Windows 10, Microsoft Entra joined) Device3 (Windows 10, Microsoft Entra registered) Device4 (Android, Microsoft Entra registered) All these devices are either Azure AD Joined or Azure AD Registered and can have the Global Secure Access client deployed. Therefore, all four devices can potentially use Private Access. Therefore, the correct answer is E. Device1, Device2, Device3, and Device4.

Microsoft Entra Private Access (formerly part of Global Secure Access in Microsoft Entra) is a Zero Trust Network Access (ZTNA) solution that allows secure access to private resources (e.g., internal apps). To use Microsoft Entra Private Access, devices must meet the following requirement: Be Microsoft Entra joined (not just registered).

The requirements vary depending on the platform OS. For WINDOWS, the device must be either Microsoft Entra joined or Microsoft Entra hybrid joined. https://learn.microsoft.com/en-us/entra/global-secure-access/how-to-install-windows-client For ANDROID, the device must be Microsoft Entra registered. https://learn.microsoft.com/en-us/entra/global-secure-access/how-to-install-android-client?tabs=device-administrator

B is the answer. Per the prerequisites defined in the MS docs: A managed device joined to the onboarded tenant. The device must be either Microsoft Entra joined or Microsoft Entra hybrid joined. Microsoft Entra registered devices aren't supported.

only join https://learn.microsoft.com/en-us/entra/global-secure-access/how-to-install-windows-client

answer is B. check this link... https://learn.microsoft.com/en-us/entra/global-secure-access/how-to-install-windows-client. For GSA you need Microsoft Entra joined or MS entra hybrid JOINED devices. Microsoft entra registered devices are not supported.

Isn't B a better option? for Android though it seems just registered is enough but there is more to it, the question doesn't say anything about how its managed or if the authenticator app is intalled. *Android devices must be Microsoft Entra registered devices. -->Devices not managed by your organization must have the Microsoft Authenticator app must be installed. -->Devices not managed through Intune must have the Company Portal app installed. -->Device enrollment is required for Intune device compliance policies to be enforced.