Exam SC-300 topic 2 question 6 discussion

Actual exam question from Microsoft's SC-300

Question #: 6
Topic #: 2

You have an Active Directory domain that syncs to an Azure Active Directory (Azure AD) tenant.
The on-premises network contains a VPN server that authenticates to the on-premises Active Directory domain. The VPN server does NOT support Azure Multi-
Factor Authentication (MFA).
You need to recommend a solution to provide Azure MFA for VPN connections.
What should you include in the recommendation?

A. Azure AD Application Proxy
B. an Azure AD Password Protection proxy
C. Network Policy Server (NPS)
D. a pass-through authentication proxy

Show Suggested Answer

Suggested Answer: C 🗳️

by Official_Fridaws at Nov. 11, 2021, 6:29 p.m.

Comments

Submit Cancel

Official_Fridaws

Highly Voted 2 years, 7 months ago

Yes! C is indeed the correct answer. NPS (Network Policy and Access Service) is like a middle man between the VPN client and Azure MFA. The NPS role is installed on a domain-joined server or the domain controller and is configured to authenticate and authorize RADIUS requests from the VPN client. The VPN should be configured to use RADIUS authentication and point to the NPS server. The MFA NPS extension is installed anywhere but the VPN server. When a user/VPN client attempts to authenticate, it sends a RADIUS request to the NPS server through the VPN which performs the primary authentication and then triggers the NPS Extension for secondary authentication.

upvoted 163 times

NickHSO

2 years, 4 months ago

Upvote for additional knowledge! thank you

upvoted 13 times

...

Official_Fridaws

Highly Voted 2 years, 7 months ago

https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-nps-extension

upvoted 5 times

...

haazybanj

Most Recent 7 months ago

Selected Answer: C

The correct answer is C. Network Policy Server (NPS). Network Policy Server (NPS) is a server role that allows you to implement RADIUS authentication, authorization, and accounting. You can use NPS to integrate Azure MFA with your VPN server.

upvoted 2 times

...

EmnCours

10 months, 3 weeks ago

Selected Answer: C

Correct Answer: C

upvoted 1 times

...

mali1969

11 months, 3 weeks ago

To provide Azure MFA for VPN connections, you can integrate Azure MFA with existing on-premises network policy server (NPS) servers. You can also use Azure Multi-Factor Authentication Server (Azure MFA Server) to connect with various third-party VPN solutions Based on this information, the solution that should be recommended is C. Network Policy Server (NPS). This is because it allows you to secure RADIUS client authentication by deploying either an on-premises based MFA solution or a cloud-based MFA solution

upvoted 2 times

...