Hotspot Question You have an on-premises network that contains the apps shown in the following table. You have a Microsoft Entra tenant. You plan to implement Microsoft Entra application proxy…

This question tests knowledge of Microsoft Entra Application Proxy's supported protocols and which application types are accessible through it. Application Proxy supports specific protocols for internal communication and has limitations on which app types it can proxy.

Submitted by certguy· Mar 6, 2026Secure identity and access

Question

Hotspot Question You have an on-premises network that contains the apps shown in the following table. You have a Microsoft Entra tenant. You plan to implement Microsoft Entra application proxy. Which protocols will be used by Application Proxy, and which apps will be accessible through the proxy? To answer, select the appropriate options in the answer area NOTE: Each correct selection is worth one point. Answer:

Exhibit

Answer Area

Protocols:
Inbound HTTP and HTTPSInbound UDPOutbound HTTP and HTTPSOutbound UDP
Apps:
App1 onlyApp1 and App2 onlyApp1 and App3 onlyApp1, App2, and App3

Explanation

Approach. Microsoft Entra Application Proxy uses HTTPS between the external client and the Application Proxy service in the cloud, and it uses HTTP or HTTPS between the Application Proxy connector (on-premises) and the backend application. The connector communicates outbound over port 443 (HTTPS) to the Application Proxy cloud service - no inbound firewall ports need to be opened. For app accessibility: Application Proxy supports web-based applications using HTTP/HTTPS (e.g., IIS-hosted web apps, SharePoint). It does NOT natively support apps that rely on non-HTTP protocols such as RDP (Remote Desktop), SSH, or raw TCP/UDP. So apps like an RDP-based application would NOT be accessible through Application Proxy, while HTTP/HTTPS web applications (such as an IIS app or an internal web portal) WOULD be accessible. The correct selections would indicate HTTPS as the external protocol, HTTP/HTTPS as the internal connector protocol, and only HTTP/HTTPS-based web apps as accessible through the proxy.

Concept tested. Microsoft Entra Application Proxy protocol support (HTTPS externally, HTTP/HTTPS internally via connector) and supported application types (HTTP/HTTPS web apps only; non-web protocols like RDP or SSH are not supported natively).

Reference. https://learn.microsoft.com/en-us/entra/identity/app-proxy/application-proxy

Topics

#Microsoft Entra Application Proxy#on-premises application access#protocols#single sign-on

Community Discussion

No community discussion yet for this question.

Full AZ-500 Practice