Exam SC-100 topic 3 question 19 discussion

Actual exam question from Microsoft's SC-100

Question #: 19
Topic #: 3

Your company has a hybrid cloud infrastructure that contains an on-premises Active Directory Domain Services (AD DS) forest, a Microsoft 365 subscription, and an Azure subscription.
The company's on-premises network contains internal web apps that use Kerberos authentication. Currently, the web apps are accessible only from the network.
You have remote users who have personal devices that run Windows 11.
You need to recommend a solution to provide the remote users with the ability to access the web apps. The solution must meet the following requirements:
✑ Prevent the remote users from accessing any other resources on the network.
✑ Support Azure Active Directory (Azure AD) Conditional Access.
✑ Simplify the end-user experience.
What should you include in the recommendation?

A. Azure AD Application Proxy
B. web content filtering in Microsoft Defender for Endpoint
C. Microsoft Tunnel
D. Azure Virtual WAN

Show Suggested Answer

Suggested Answer: A 🗳️

by PlumpyTumbler at Sept. 2, 2022, 3:33 a.m.

Comments

Submit Cancel

Mithu94

7 months, 2 weeks ago

Selected Answer: A

Azure AD Application Proxy

upvoted 2 times

...

XtraWest

1 year ago

Selected Answer: A

A. Azure AD Application Proxy as per Chat GPT

upvoted 2 times

...

zellck

1 year, 7 months ago

Selected Answer: A

A is the answer. https://learn.microsoft.com/en-us/azure/active-directory/app-proxy/application-proxy Azure Active Directory's Application Proxy provides secure remote access to on-premises web applications. After a single sign-on to Azure AD, users can access both cloud and on-premises applications through an external URL or an internal application portal. For example, Application Proxy can provide remote access and single sign-on to Remote Desktop, SharePoint, Teams, Tableau, Qlik, and line of business (LOB) applications.

upvoted 4 times

...

awssecuritynewbie

1 year, 10 months ago

Selected Answer: A

The rest of them do not offer simple and also Conditional access because Azure AD is not being utilized.

upvoted 1 times

...

TJ001

1 year, 12 months ago

A is perfect

upvoted 2 times

...

CertShooter

2 years ago

Selected Answer: A

Azure AD Application Proxy is a feature of Azure AD that allows you to publish on-premises web applications securely to the internet. It acts as a reverse proxy, routing the user's request to the internal web app and returning the response back to the user. By using Azure AD Application Proxy, you can provide the remote users with access to the internal web apps while preventing them from accessing any other resources on the network. Azure AD Application Proxy also supports Azure AD Conditional Access, which allows you to set policies that determine when and how users can access your applications. This can help you ensure that only authorized users are able to access the web apps, and that their access is secure. Additionally, Azure AD Application Proxy simplifies the end-user experience by providing a single sign-on (SSO) experience for the users, which can reduce the need for them to remember multiple usernames and passwords. Other options, such as web content filtering in Microsoft Defender for Endpoint, Microsoft Tunnel, or Azure Virtual WAN, may not be as suitable for this scenario because they do not provide the same level of control over access to the internal web apps or the same level of simplicity for the end-user experience.

upvoted 2 times

...