Microsoft Security, Compliance, and Identity Fundamentals (SC-900)Describe the capabilities of Microsoft EntraHard
A security architect is designing an identity solution for a company that requires users to access highly sensitive on-premises applications securely from outside the corporate network, without needing a VPN. The solution must integrate with Microsoft Entra ID for authentication and authorization. Which Microsoft Entra feature should the architect recommend?
- AMicrosoft Entra Application Proxy
- BMicrosoft Entra B2B Collaboration
- CMicrosoft Entra Domain Services
- DMicrosoft Entra Connect
Show answer & explanationAnswer & explanation
Correct answer: A. Microsoft Entra Application Proxy
Microsoft Entra Application Proxy publishes on-premises web applications, making them securely accessible from outside the corporate network without a VPN. It integrates with Microsoft Entra ID for single sign-on and conditional access, perfectly matching the requirements for secure external access to sensitive on-premises apps.
Why the other options are wrong
- B. B2B Collaboration is for external users accessing cloud resources, not for publishing internal web apps.
- C. Domain Services provides managed AD in Azure, not for external access to on-premises apps.
- D. Microsoft Entra Connect synchronizes directories, it doesn't provide remote access to applications.
Microsoft Entra Application Proxy
A Microsoft Entra feature that provides secure remote access to on-premises web applications and other internal resources, without requiring a VPN or exposing the internal network directly.
- Publishes internal web applications for external access.
- Integrates with Microsoft Entra ID for authentication and authorization (SSO, Conditional Access).
- Eliminates the need for VPNs for specific applications.
- Uses a connector to establish an outbound-only connection to Azure.
Memory trick: App Proxy: Your on-prem apps, now global and secure.