Microsoft Security, Compliance, and Identity Fundamentals (SC-900)Describe the capabilities of Microsoft EntraHard
A security architect is designing an identity solution for a company that requires users to access on-premises web applications from outside the corporate network without using a VPN. The solution must provide secure, single sign-on (SSO) access to these internal applications through Microsoft Entra ID. Which Microsoft Entra capability is essential for this requirement?
- AMicrosoft Entra Application Proxy
- BMicrosoft Entra ID Protection
- CMicrosoft Entra Connect
- DMicrosoft Entra B2B Collaboration
Show answer & explanationAnswer & explanation
Correct answer: A. Microsoft Entra Application Proxy
Microsoft Entra Application Proxy enables secure remote access to on-premises web applications. It allows users to access internal web apps from any device and location, providing SSO through Microsoft Entra ID without requiring a VPN.
Why the other options are wrong
- B. ID Protection focuses on risk detection, not application publishing.
- C. Connect synchronizes identities, not application access.
- D. B2B Collaboration is for external user access to resources, not publishing internal apps.
Microsoft Entra Application Proxy
A Microsoft Entra ID service that provides secure remote access to on-premises web applications.
- Publishes internal web apps for external access without a VPN
- Integrates with Microsoft Entra ID for single sign-on (SSO) and Conditional Access
- Uses a small connector agent installed in the on-premises network
Memory trick: App Proxy brings your internal apps to the outside world, securely.