SC-300 Practice Question 3470
Exam: SC-300
Domain: Plan and implement workload identities
Difficulty: medium
You need to publish an on-premises web application securely to external employees without opening inbound firewall ports or deploying a VPN. What service should you implement?
Answer Options
A
Microsoft Entra Application Proxy
B
Port forwarding port 3389 RDP on perimeter firewalls
C
Point-to-Site VPN with SSTP authentication
D
Publishing internal servers to public DNS without authentication
Correct Answer
A: Microsoft Entra Application Proxy
Explanation
Microsoft Entra Application Proxy publishes internal web applications by deploying an outbound-only lightweight connector agent on-premises.