SC-100: Microsoft Cybersecurity ArchitectDemo

By Microsoft · Question Mode

QuestionQ341

Design security solutions for applications and data

Your organization has a Microsoft Entra tenant configured with Microsoft Entra Private Access.

You are planning to publish a set of internal web applications using a Global Secure Access application.

You need to make sure users can reach these web apps by connecting through the Global Secure Access application.

What should you use?

  • A a Conditional Access policy that grants access from only compliant devices
  • B a forwarding profile that directs all outbound internet traffic through the Microsoft backbone network
  • C a connector group that contains the connectors used to access the web apps and a single endpoint for the internal fully qualified domain names (FQDNs)
  • D an access policy that limits connections based on user groups
Explanation

To publish internal resources through a Global Secure Access (Private Access) Enterprise application, you must configure a private network connector group containing the connectors that can reach the target resources, and then add an application segment that specifies the internal fully qualified domain name (or IP address/range) and port for the web app. This connector group and FQDN endpoint definition is what enables the Global Secure Access client to intercept traffic destined for that FQDN, route it through the service, and have the connector forward it to the internal web app. Without this configuration, there is no mapping between the published app and the internal resource, so no traffic can be routed even if access policies or Conditional Access controls are in place.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!