MD-102 · Question #359
Your on-premises network contains a database server and is accessible by using a VPN server. You have a Microsoft 365 tenant. You manage devices by using Microsoft Endpoint Manager. You have an…
The correct answer is B. Network traffic rules. Network traffic rules in an Intune VPN profile allow you to define per-app VPN associations and restrict which network destinations (IP addresses, ports, protocols) are reachable through the tunnel for a given application. By creating a rule that ties App1 to only the database…
Question
Your on-premises network contains a database server and is accessible by using a VPN server. You have a Microsoft 365 tenant. You manage devices by using Microsoft Endpoint Manager. You have an application named App1 that is deployed to every computer enrolled in Microsoft Intune. Each computer has a VPN profile assigned. You need to ensure that App1 can access only the database server. App1 must be prevented from accessing other resources on the on-premises network. What should you modify in the VPN profile?
Options
- AProxy
- BNetwork traffic rules
- CDNS Settings
- DConditional Access
How the community answered
(37 responses)- A22% (8)
- B62% (23)
- C11% (4)
- D5% (2)
Explanation
Network traffic rules in an Intune VPN profile allow you to define per-app VPN associations and restrict which network destinations (IP addresses, ports, protocols) are reachable through the tunnel for a given application. By creating a rule that ties App1 to only the database server's IP/port, all other on-premises traffic from App1 is dropped, satisfying the requirement. Proxy settings control how HTTP requests are routed and do not provide per-app destination filtering. DNS settings control name resolution but cannot block IP-level access to other resources. Conditional Access controls whether a device or user can access a cloud service-it does not filter VPN traffic to specific on-premises hosts.
Topics
Community Discussion
No community discussion yet for this question.