Exam SC-100 topic 3 question 46 discussion

B and D do not "prevent" anything. A is a solution for network access to internal resources (comparable to Zscaler's ZPA). C is a solution for network access too, it is not directly related to authentication. However, it has this feature: A GIF showing a user updating tenant restrictions "Universal tenant restriction: Protect against data exfiltration through foreign identities and foreign tenants by enabling universal tenant restrictions across all devices." https://www.microsoft.com/en-us/security/business/identity-access/microsoft-entra-internet-access?market=de#tabxe358eb34e33b40ffa6edad94e04a7223

None of the answers are right, you have to have a Microsoft traffic profile enabled and then Browse to Global Secure Access > Settings > Session Management > Universal Tenant Restrictions https://learn.microsoft.com/en-us/entra/global-secure-access/how-to-universal-tenant-restrictions

Entra Internet Access internet access is for outgoing

Not A, couse is more releated to access private apps or resources

C -is designed to provide secure access to private applications and resources, typically replacing traditional VPNs with a Zero Trust Network Access (ZTNA) solution12. It focuses on securing access to internal resources from any device and network, which is not directly related to restricting user authentication to a specific Microsoft 365 tenant.

A - It appears you can do this with both Private and Public Access, but the Private way is easier to do.