Microsoft Security, Compliance, and Identity Fundamentals (SC-900)Describe the capabilities of Microsoft EntraMedium
A security architect is designing an identity solution for a company that requires users to access an on-premises web application securely from outside the corporate network without using a VPN. Which Microsoft Entra capability should be implemented?
- AMicrosoft Entra Domain Services
- BMicrosoft Entra ID Protection
- CMicrosoft Entra Connect
- DMicrosoft Entra Application Proxy
Show answer & explanationAnswer & explanation
Correct answer: D. Microsoft Entra Application Proxy
Microsoft Entra Application Proxy enables secure remote access to on-premises web applications. It publishes these applications through Microsoft Entra ID, allowing users to access them from anywhere without a VPN.
Why the other options are wrong
- A. Domain Services provides managed domain controllers in Azure for legacy applications, not remote access to on-premises apps.
- B. ID Protection focuses on risk detection and remediation, not secure remote access to applications.
- C. Entra Connect synchronizes identities between on-premises AD and Entra ID, not for remote app access.
Microsoft Entra Application Proxy
A service that provides secure remote access to on-premises web applications through Microsoft Entra ID, eliminating the need for a VPN or DMZ.
- Publishes on-premises web apps to external users
- Integrates with Entra ID for authentication
- Enhances security by not exposing internal network directly
Memory trick: The Proxy is the bridge from your home to the cloud apps.