You have an on-premises server named Server1. Server1 is an FTP server that can be accessed by only the users at your company. You have an Azure subscription. You need to recommend a Zero Trust…

The correct answer is C. Microsoft Entra Private Access. Microsoft Entra Private Access is Microsoft's Zero Trust Network Access (ZTNA) solution for securing access to private/on-premises resources (like an internal FTP server) from the internet. It routes traffic through Microsoft's Global Secure Access network fabric and enforces…

Design security operations, identity, and compliance capabilities

Question

You have an on-premises server named Server1. Server1 is an FTP server that can be accessed by only the users at your company. You have an Azure subscription. You need to recommend a Zero Trust Network Access (ZTNA) solution to enforce Conditional Access policies when users access Server1 from the internet. What should you include in the recommendation?

Options

AMicrosoft Entra application proxy
BMicrosoft Entra Internet Access
CMicrosoft Entra Private Access
DAzure Application Gateway
EAzure Bastion

How the community answered

(39 responses)

B
10% (4)
C
82% (32)
D
5% (2)
E
3% (1)

Explanation

Microsoft Entra Private Access is Microsoft's Zero Trust Network Access (ZTNA) solution for securing access to private/on-premises resources (like an internal FTP server) from the internet. It routes traffic through Microsoft's Global Secure Access network fabric and enforces Conditional Access policies - including MFA, device compliance, and sign-in risk - before allowing a connection to the private resource, replacing traditional VPN with identity-centric access control. Entra application proxy (A) is for HTTP/HTTPS web apps via a reverse proxy, not arbitrary protocols like FTP. Entra Internet Access (B) secures internet-bound traffic, not access to internal resources. Azure Application Gateway (D) is a layer-7 load balancer/WAF for web apps. Azure Bastion (E) provides browser-based RDP/SSH to Azure VMs only.

Topics

#Zero Trust Network Access#Microsoft Entra Private Access#Conditional Access#On-premises resource access

Community Discussion

No community discussion yet for this question.

Full SC-100 Practice