Microsoft Security, Compliance, and Identity Fundamentals (SC-900)Describe the capabilities of Microsoft EntraMedium
A company wants to allow its employees to securely access on-premises web applications from outside the corporate network without using a VPN. They need a Microsoft Entra capability that acts as a reverse proxy to publish these internal applications externally. Which capability should they use?
- AMicrosoft Entra Connect
- BMicrosoft Entra Application Proxy
- CMicrosoft Entra Domain Services
- DMicrosoft Entra B2B collaboration
Show answer & explanationAnswer & explanation
Correct answer: B. Microsoft Entra Application Proxy
Microsoft Entra Application Proxy provides secure remote access to on-premises web applications. It publishes internal web apps through Microsoft Entra ID, allowing users to access them from anywhere without a VPN.
Why the other options are wrong
- A. Entra Connect synchronizes on-premises AD with Microsoft Entra ID, not publishes apps.
- C. Domain Services provides managed domain services in Azure, not remote access to on-premises web apps.
- D. B2B collaboration manages external guest users, not external access to internal apps for employees.
Microsoft Entra Application Proxy
A Microsoft Entra ID feature that provides secure remote access to on-premises web applications.
- Acts as a reverse proxy for internal web apps.
- Enables single sign-on (SSO) with Microsoft Entra ID.
- Eliminates the need for VPN or DMZ solutions for internal apps.
Memory trick: App Proxy is your secure tunnel from the internet to your internal apps.