SC-100 · Question #240
Your on-premises network contains an Active Directory Domain Services (AD DS) domain named corp.contoso.com and an AD DS-integrated application named App1. Your perimeter network contains a server nam
Sign in or unlock SC-100 to reveal the answer and full explanation for question #240. The question stem and answer options stay visible for context.
Question
Your on-premises network contains an Active Directory Domain Services (AD DS) domain named corp.contoso.com and an AD DS-integrated application named App1. Your perimeter network contains a server named Server1that runs Windows Server. You have a Microsoft Entra tenant named contoso.com that syncs with corp.contoso.com. You plan to implement a security solution that will include the following configurations:
- Manage access to App1 by using Microsoft Entra Private Access.
- Deploy a Microsoft Entra application proxy connector to Server1.
- Implement single sign-on (SSO) for App1 by using Kerberos constrained
delegation. For Server1, configure the following rules in Windows Defender Firewall with Advanced Security:
- Rule1: Allow TCP 443 inbound from a designated set of Azure URLs,
- Rule2: Allow TCP 443 outbound to a designated set of Azure URLs,
- Rule3: Allow TCP 80 outbound to a designated set of Azure URLs,
- Rule4: Allow TCP 389 outbound to the domain controllers on
corp.contoso.com. You need to maximize security for the planned implementation. The solution must minimize the impact on the connector. Which rule should you remove?
Options
- ARule1
- BRule2
- CRule3
- DRule4
Unlock SC-100 to see the answer
You've previewed enough free SC-100 questions. Unlock SC-100 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.