nerdexam
Microsoft

SC-100 · Question #241

You have a Microsoft Entra tenant named contoso.com and use Microsoft Intune. Each user in contoso.com has a Microsoft Entra ID P1 license and a Windows 11 device that has the Global Secure Access…

The correct answer is B. Traffic to https://www.adatum.com:8433 will be blocked from all the devices. D. Traffic to https://www.fabrikam.com will be allowed from compliant devices only. In WCFPolicy1, the only rule specifies *.adatum.com as the allowed domain but without specifying a particular port. Typically, web content filtering applies only to standard HTTP/HTTPS traffic (ports 80 and 443). Since this traffic is over port 8433, which is nonstandard, it…

Design security operations, identity, and compliance capabilities

Question

You have a Microsoft Entra tenant named contoso.com and use Microsoft Intune. Each user in contoso.com has a Microsoft Entra ID P1 license and a Windows 11 device that has the Global Secure Access client deployed. You plan to deploy the following configuration of Microsoft Entra Internet Access:

  • Enable a baseline profile.
  • Create a security profile named Profile1 that has a priority of 300

and contains a single web content filtering policy named WCFPolicy1.Configure WCFPolicy1 as follows:

  • Set Action to allow.
  • Include a single rule that has a fully qualified domain name (FQDN)

destination of *.adatum.com. Link Profile1 to a Conditional Access policy named CAPolicy1, apply CAPolicy1 to all users, and grant access unless a user's device is noncompliant. You need to evaluate the impact of the planned deployment on traffic to the following resources:

Which two traffic scenarios will occur? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

Options

How the community answered

(66 responses)
  • A
    2% (1)
  • B
    64% (42)
  • C
    9% (6)
  • E
    5% (3)
  • F
    21% (14)

Explanation

In WCFPolicy1, the only rule specifies *.adatum.com as the allowed domain but without specifying a particular port. Typically, web content filtering applies only to standard HTTP/HTTPS traffic (ports 80 and 443). Since this traffic is over port 8433, which is nonstandard, it would not match the allow rule in WCFPolicy1. Thus, it will be blocked from all devices. Since there is no rule in WCFPolicy1 to specifically allow or block traffic to fabrikam.com, the Conditional Access policy CAPolicy1 will govern access. CAPolicy1 is configured to grant access only if a user's device is compliant. Therefore, traffic to

Topics

#Microsoft Entra Internet Access#Web Content Filtering#Conditional Access#Global Secure Access

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full SC-100 Practice