Microsoft
SC-300 · Question #49
Hotspot Question You have an on-premises datacenter that contains the hosts shown in the following table. You have an Azure Active Directory (Azure AD) tenant that syncs to the Active Directory forest
Sign in or unlock SC-300 to reveal the answer and full explanation for question #49. The question stem and answer options stay visible for context.
Submitted by certguy· Mar 6, 2026Implement and manage hybrid identity - specifically publishing on-premises applications to Azure AD users using Azure AD Application Proxy (AZ-104 / AZ-500 / MS-100 domain: Identity and Access Management)
Question
Hotspot Question You have an on-premises datacenter that contains the hosts shown in the following table. You have an Azure Active Directory (Azure AD) tenant that syncs to the Active Directory forest. Multi-factor authentication (MFA) is enforced for Azure AD. You need to ensure that you can publish App1 to Azure AD users. What should you configure on Server and Firewall1? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Answer:
Exhibit
Answer Area
- Service to install on Server4:Azure AD Application ProxyThe Azure AD Password Protection DC agentThe Azure AD Password Protection proxy serviceWeb Application Proxy in Windows Server
- Rule to configure on Firewall1:Allow incoming HTTPS connections from Azure AD to Server4.Allow incoming IPsec connections from Azure AD to Server4.Allow outbound HTTPS connections from Server4 to Azure AD.Allow outbound IPsec connections from Server4 to Azure AD.
Unlock SC-300 to see the answer
You've previewed enough free SC-300 questions. Unlock SC-300 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#Azure AD Application Proxy#Hybrid Identity#Application Publishing#Network Security / Firewall Rules