What is the primary role of Microsoft Entra Internet Access when used as a secure web gateway (SWG)?

To provide a private IP address for each user's device

To provide a VPN tunnel for remote users to access the corporate network

To manage on-premises firewall rules for the corporate network

To filter and monitor outbound internet traffic from users and devices based on security policies

A company is using Microsoft Entra Private Access to provide access to a set of on-premises applications. They have a requirement to ensure that only users in a specific security group can access the applications, and they also need to enforce MFA for those users. What should you do?

Use a network security group to restrict access to the applications and require MFA through the VPN.

Configure the applications to require MFA through the application itself.

Assign the security group to the applications in Microsoft Entra Private Access and create a conditional access policy that requires MFA for the applications.

Create a conditional access policy that requires MFA and targets the security group.

When configuring Microsoft Entra Internet Access for Microsoft Services in a cross-tenant scenario, what is a key consideration?

Ensuring that the correct tenant ID is used for policy application

Disabling Conditional Access for all users to simplify configuration

Using the same policy for all tenants to ensure consistency

Blocking all cross-tenant access to Microsoft services

A company is designing a network for a new office. They want to use Microsoft Entra Internet Access for web traffic and Microsoft Entra Private Access for private applications. They have a requirement to ensure that all traffic is inspected, including traffic from unmanaged devices. They also want to minimize the number of components to manage. What should you recommend?

Use Azure Firewall for all internet traffic and a site-to-site VPN for private access.

Use Microsoft Entra Internet Access with DNS-based enforcement for unmanaged devices and client-based enforcement for managed devices, and use Microsoft Entra Private Access for private applications.

Use Microsoft Entra Private Access for all traffic, including internet traffic.

Use a traditional VPN for remote access and a web proxy for internet traffic.

Which capability is a key feature of Microsoft Entra Internet Access when used as a secure web gateway?

Replacing the need for any on-premises firewall

Conditional Access integration to enforce access policies based on user and device signals

Encrypting all data at rest in the user's device

Providing a dedicated physical appliance for each branch office

Microsoft Certified:Cybersecurity Architect Expert

Domain 3Objective 4

Evaluate Solutions for Network Security and Security Service Edge (SSE) SC-100 Practice Questions (Page 3)

Part of the Design security solutions for infrastructure domain, which accounts for 25–30% of the SC-100 exam. Microsoft does not publish an official question count, but from its 120-minute exam (~50–80 total, ~13–24 in this domain), expect 3–6 from this objective — we provide 29 practice questions to prepare you well beyond it. (estimate)

29questions here

6free pages

4concepts

25–30%of the exam

Questions 11–15

11foundation · easy
What is the primary role of Microsoft Entra Internet Access when used as a secure web gateway (SWG)?
Select an answer first
12expert · hard
A company is using Microsoft Entra Private Access to provide access to a set of on-premises applications. They have a requirement to ensure that only users in a specific security group can access the applications, and they also need to enforce MFA for those users. What should you do?
Select an answer first
13foundation · easy
When configuring Microsoft Entra Internet Access for Microsoft Services in a cross-tenant scenario, what is a key consideration?
Select an answer first
14expert · hard
A company is designing a network for a new office. They want to use Microsoft Entra Internet Access for web traffic and Microsoft Entra Private Access for private applications. They have a requirement to ensure that all traffic is inspected, including traffic from unmanaged devices. They also want to minimize the number of components to manage. What should you recommend?
Select an answer first
15foundation · easy
Which capability is a key feature of Microsoft Entra Internet Access when used as a secure web gateway?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SC-100

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “SC-100” is a trademark of its owner, used for identification only.