SC-300 Practice Question 3456
Exam: SC-300
Domain: Implement authentication and access management
Difficulty: medium
You want to prevent users from bypassing Conditional Access geographic fencing by connecting through unapproved web proxies. Which condition should you enforce?
Answer Options
A
Configure Locations condition requiring traffic from trusted Named Locations
B
Block TCP port 80 at external web routers
C
Delete all external DNS zone records
D
Disable IPv6 on client laptops
Correct Answer
A: Configure Locations condition requiring traffic from trusted Named Locations
Explanation
Configure the "Locations" condition to require connections to originate from specific trusted Named Locations, blocking or challenging connections from untrusted countries.