SC-100 Question #330: Real Exam Question with Answer & Explanation

Question

You have an on-premises server named Server1. Server1 is an FTP server that can be accessed by only the users at your company. You have an Azure subscription. You need to recommend a Zero Trust Network Access (ZTNA) solution to enforce Conditional Access policies when users access Server1 from the internet. What should you include in the recommendation?

Options

• AMicrosoft Entra application proxy
• BMicrosoft Entra Internet Access
• CMicrosoft Entra Private Access
• DAzure Application Gateway
• EAzure Bastion

Explanation

{"question_number": 10, "correct_answer": "C", "explanation": "Microsoft Entra Private Access is Microsoft's Zero Trust Network Access (ZTNA) solution for securing access to private/on-premises resources (like an internal FTP server) from the internet. It routes traffic through Microsoft's Global Secure Access network fabric and enforces Conditional Access policies - including MFA, device compliance, and sign-in risk - before allowing a connection to the private resource, replacing traditional VPN with identity-centric access control. Entra application proxy (A) is for HTTP/HTTPS web apps via a reverse proxy, not arbitrary protocols like FTP. Entra Internet Access (B) secures internet-bound traffic, not access to internal resources. Azure Application Gateway (D) is a layer-7 load balancer/WAF for web apps. Azure Bastion (E) provides browser-based RDP/SSH to Azure VMs only.", "generated_by": "claude-sonnet", "llm_judge_score": 4}

No community discussion yet for this question.