Implement Global Secure Access SC-300 Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   What is the primary purpose of deploying Internet Access in Global Secure Access?

   • ATo synchronize user identities across directories
   • BTo provide a private network for internal applications
   • CTo provide secure connectivity for users to the internet
   • DTo replace the need for a firewall on the corporate network
   Reveal Solution Discussion Select an answer first
2. 12expert · hard

   A company wants to use Global Secure Access to secure Microsoft 365 traffic. They have a hybrid environment with some users on-premises and some remote. They want to ensure that only remote users' Microsoft 365 traffic is routed through the service, while on-premises users continue to use the local network path. What should you do?

   • ADeploy the client only to remote users and not to on-premises users.
   • BUse a conditional access policy to require the client only for remote users.
   • CAssign the Microsoft 365 traffic forwarding profile only to the remote users' group.
   • DEnable the Microsoft 365 profile for all users and rely on the network to route on-premises traffic directly.
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A company wants to apply different security policies to Microsoft 365 traffic compared to general internet traffic. They have enabled both the Microsoft 365 and Internet Access traffic profiles. Which configuration should you implement to differentiate the policies?

   • AConfigure the client to use a VPN for Microsoft 365 traffic and the service for internet traffic.
   • BUse the same web filtering policy for both profiles.
   • CDisable the Internet Access profile and use only the Microsoft 365 profile.
   • DConfigure separate Conditional Access policies for the Microsoft 365 and Internet Access traffic profiles.
   Reveal Solution Discussion Select an answer first
5. 14expert · hard

   A company has multiple private applications, some of which are legacy and do not support modern authentication. They want to use Global Secure Access Private Access to provide secure access without changing the applications. The security team requires that access to these applications be conditional on device compliance. What is the best approach?

   • AUse a VPN instead of Global Secure Access because legacy apps do not support modern authentication.
   • BUse the Internet Access profile to route traffic to the private applications.
   • CPublish each application as an enterprise app in Microsoft Entra ID and use conditional access policies to require compliant devices.
   • DPublish all applications as a single enterprise app and use conditional access to require compliant devices.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A company wants to use Global Secure Access Internet Access to enforce security for all internet traffic. They have deployed the client to all users. They want to ensure that traffic from unmanaged devices is not routed through the service. What should you do?

   • ADisable the Internet Access profile for unmanaged devices.
   • BUse a conditional access policy that requires the Global Secure Access client for Internet Access.
   • CEnable the Internet Access profile and assign it to all users.
   • DBlock unmanaged devices at the network level using firewall rules.
   Reveal Solution Discussion Select an answer first