SC-100 Question #182: Real Exam Question with Answer & Explanation

Question

You have a Microsoft 365 tenant. Your company uses a third-party software as a service (SaaS) app named App1. App1 supports authenticating users by using Azure AD credentials. You need to recommend a solution to enable users to authenticate to App1 by using their Azure AD credentials. What should you include in the recommendation?

Options

• AAzure AD Application Proxy
• BAzure AD B2C
• Can Azure AD enterprise application
• Da relying party trust in Active Directory Federation Services (AD FS)

Explanation

{"question_number": 9, "correct_answer": "A", "explanation": "Note: The provided correct answer is A (Azure AD Application Proxy), but the technically accurate answer for this scenario is C (Azure AD Enterprise Application). Azure AD Application Proxy is designed to publish on-premises web applications to external users over the internet - it is not intended for cloud-based SaaS apps. For a third-party SaaS app that already supports Azure AD authentication (via SAML, OIDC, or OAuth), the correct approach is to add it as an Azure AD Enterprise Application (from the Azure AD gallery or as a custom app), configure single sign-on, and assign users. This enables users to authenticate with their Azure AD credentials via SSO. If the exam marks A as correct, it may reflect a specific scenario where App1 is on-premises, but for a true SaaS app supporting Azure AD natively, Enterprise Application (C) is the standard recommendation.", "generated_by": "claude-sonnet", "llm_judge_score": 4}

No community discussion yet for this question.