Evaluate Solutions for Network Security and Security Service Edge (SSE) SC-100 Practice Questions (Page 6)

Questions 26–29

1. 26application · medium

   A company has a partner organization in a different Microsoft Entra tenant. They want to allow partner users to access a specific Microsoft 365 application securely, with conditional access policies that require MFA. They also want to ensure that partner users cannot access other internal resources. What should they configure?

   • AAzure AD B2B collaboration with default settings
   • BVPN access for partner users
   • CCross-tenant access policies with conditional access for the specific application
   • DMicrosoft Entra Private Access for the application
   Reveal Solution Discussion Select an answer first
2. 27expert · hard

   A company is evaluating Microsoft Entra Internet Access as a secure web gateway. They have a requirement to block high-risk websites for all users, but they also need to allow certain users to access a specific high-risk website for business purposes. They want to enforce this based on user group membership. They also want to ensure that traffic to private applications is not routed through the web gateway. What should they configure?

   • AConditional access policies with exclusions for the specific group and configure Entra Private Access for private apps
   • BAzure Firewall application rules based on user IP addresses
   • CMicrosoft Defender for Cloud Apps with session policies
   • DUse a single conditional access policy for all users
   Reveal Solution Discussion Select an answer first
4. 28expert · hard

   A company is evaluating Microsoft Entra Private Access to replace their VPN. They have a requirement to provide access to a legacy application that uses a non-standard TCP port. They also need to ensure that only users in a specific security group can access the application. What should you do?

   • AUse a conditional access policy to restrict access to the security group.
   • BPublish the application through Azure Application Gateway with a custom port.
   • CConfigure the application in Microsoft Entra Private Access with the non-standard port and assign the security group to the application.
   • DSet up a VPN that allows access to the port and use a network security group to restrict access.
   Reveal Solution Discussion Select an answer first
5. 29foundation · easy

   What is the primary purpose of Microsoft Entra Private Access?

   • ATo provide a public IP address for each application
   • BTo filter internet traffic for malware protection
   • CTo manage on-premises Active Directory domain controllers
   • DTo provide secure access to private corporate applications and resources without a traditional VPN
   Reveal Solution Discussion Select an answer first