Microsoft Security, Compliance, and Identity Fundamentals (SC-900)Describe the capabilities of Microsoft EntraMedium
A multinational corporation needs to provide secure access to its on-premises web applications for external partners without exposing the internal network directly to the internet. Which Microsoft Entra capability allows this secure remote access?
- AMicrosoft Entra Connect
- BMicrosoft Entra B2B Collaboration
- CMicrosoft Entra Domain Services
- DMicrosoft Entra Application Proxy
Show answer & explanationAnswer & explanation
Correct answer: D. Microsoft Entra Application Proxy
Microsoft Entra Application Proxy provides secure remote access to on-premises web applications. It allows users, including external partners, to access internal applications from anywhere without requiring a VPN or opening inbound firewall ports, addressing the security requirement.
Why the other options are wrong
- A. Microsoft Entra Connect synchronizes identities between on-premises Active Directory and Microsoft Entra ID; it does not provide remote access to applications.
- B. Microsoft Entra B2B Collaboration manages external user identities but doesn't inherently provide the secure remote access tunnel for on-premises apps.
- C. Microsoft Entra Domain Services provides managed domain services in Azure for cloud-based VMs and applications, not remote access to on-premises apps.
Microsoft Entra Application Proxy
A feature of Microsoft Entra ID that enables users to securely access on-premises web applications from outside their corporate network.
- Publishes internal web apps externally.
- No VPN or inbound firewall rules needed.
- Integrates with Microsoft Entra pre-authentication and Conditional Access.
Memory trick: Application Proxy is the secure bridge to your internal apps.