Microsoft Security, Compliance, and Identity Fundamentals (SC-900)Describe the capabilities of Microsoft EntraHard
A security architect is designing an identity solution for a company that requires users to securely access on-premises web applications from outside the corporate network, without using a VPN. Which Microsoft Entra capability can provide this secure remote access?
- AMicrosoft Entra Application Proxy
- BMicrosoft Entra Domain Services
- CMicrosoft Entra Identity Protection
- DMicrosoft Entra Connect
Show answer & explanationAnswer & explanation
Correct answer: A. Microsoft Entra Application Proxy
Microsoft Entra Application Proxy provides secure remote access to on-premises web applications, making them available to external users without requiring a VPN or exposing the internal network directly to the internet.
Why the other options are wrong
- B. Domain Services provides managed AD in Azure, not remote access to on-premises apps.
- C. Identity Protection detects risks, not for enabling remote application access.
- D. Entra Connect synchronizes directories, not for secure remote app access.
Microsoft Entra Application Proxy
A Microsoft Entra ID feature that provides secure remote access to on-premises web applications, allowing users to access them from any device and location without a VPN.
- Publishes on-premises web apps for external access.
- Does not require a VPN or firewall changes.
- Integrates with Microsoft Entra ID for authentication and conditional access.
Memory trick: App Proxy: Your 'app' is 'proxied' from home to work.