MS-102 Practice Question 3044
Exam: MS-102
Domain: Implement and manage Microsoft Entra identity and access
Difficulty: medium
Your company has an on-premises web application using Windows Integrated Authentication (Kerberos). You need to publish it securely to remote workers without a VPN. What should you implement in Microsoft Entra ID?
Answer Options
A
Microsoft Entra Application Proxy with Kerberos Constrained Delegation
B
Point-to-Site VPN with SSTP
C
Direct RDP port forwarding over port 3389
D
Network Address Translation (NAT) pool in Azure Virtual WAN
Correct Answer
A: Microsoft Entra Application Proxy with Kerberos Constrained Delegation
Explanation
Microsoft Entra Application Proxy with Kerberos Constrained Delegation (KCD) publishes on-premises web applications securely to external users without deploying a VPN.