SC-300 · Question #28
You have an Azure Active Directory (Azure AD) tenant that syncs to an Active Directory domain. The on-premises network contains a VPN server that authenticates to the on-premises Active Directory…
The correct answer is C. Network Policy Server (NPS). NPS (Network Policy and Access Service) is like a middle man between the VPN client and Azure MFA. The NPS role is installed on a domain-joined server or the domain controller and is configured to authenticate and authorize RADIUS requests from the VPN client. The VPN should be…
Question
You have an Azure Active Directory (Azure AD) tenant that syncs to an Active Directory domain. The on-premises network contains a VPN server that authenticates to the on-premises Active Directory domain. The VPN server does NOT support Azure Multi-Factor Authentication (MFA). You need to recommend a solution to provide Azure MFA for VPN connections. What should you include in the recommendation?
Options
- AAzure AD Application Proxy
- Ban Azure AD Password Protection proxy
- CNetwork Policy Server (NPS)
- Da pass-through authentication proxy
How the community answered
(40 responses)- A8% (3)
- B5% (2)
- C83% (33)
- D5% (2)
Explanation
NPS (Network Policy and Access Service) is like a middle man between the VPN client and Azure MFA. The NPS role is installed on a domain-joined server or the domain controller and is configured to authenticate and authorize RADIUS requests from the VPN client. The VPN should be configured to use RADIUS authentication and point to the NPS server. The MFA NPS extension is installed anywhere but the VPN server. When a user/VPN client attempts to authenticate, it sends a RADIUS request to the NPS server through the VPN which performs the primary authentication and then triggers the NPS Extension for secondary https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-nps-extension-
Topics
Community Discussion
No community discussion yet for this question.