Exam AZ-305 topic 4 question 112 discussion

Actual exam question from Microsoft's AZ-305

Question #: 112
Topic #: 4

HOTSPOT
-

Your on-premises network contains an Active Directory Domain Services (AD DS) domain. The domain contains a server named Server1. Server1 contains an app named App1 that uses AD DS authentication. Remote users access App1 by using a VPN connection to the on-premises network.

You have an Azure AD tenant that syncs with the AD DS domain by using Azure AD Connect.

You need to ensure that the remote users can access App1 without using a VPN. The solution must meet the following requirements:

• Ensure that the users authenticate by using Azure Multi-Factor Authentication (MFA).
• Minimize administrative effort.

What should you include in the solution? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Show Suggested Answer

Suggested Answer:

by matanzpl at Oct. 13, 2023, 12:30 p.m.

Comments

Submit Cancel

matanzpl

Highly Voted 1 year, 1 month ago

Correct answers box1: ent app (required for MFA in conditional access) box2: azure ad app proxy

upvoted 15 times

...

OrangeSG

Highly Voted 1 year, 1 month ago

Box 1: An app registration This allows App1 to use Azure AD for authentication. https://learn.microsoft.com/en-us/answers/questions/270680/app-registration-vs-enterprise-applications Box 2: a server that runs windows server and has the Azure AD Application Proxy connector installed On-premises: A server that runs Windows Server and has the Azure AD Application Proxy connector installed. This allows App1 to be accessed from outside the on-premises network without a VPN.

upvoted 6 times

kodathedog

1 year, 1 month ago

The application doesn't do the authentication, this is handled by the App Proxy service, see https://learn.microsoft.com/en-us/entra/identity/app-proxy/application-proxy-security The service requires an Enterprise Application to be created, see https://learn.microsoft.com/en-us/entra/identity/app-proxy/application-proxy-add-on-premises-application - see section "Add an on-premises app to Microsoft Entra ID", "2. Browse to Identity > Applications > Enterprise applications".

upvoted 6 times

...

SeMo0o0o0o

Most Recent 3 weeks, 4 days ago

CORRECT

upvoted 2 times

...

prshntdxt7

8 months, 2 weeks ago

answers are correct, there's another similar mcq in earlier topics with same answer.

upvoted 1 times

...

techtest848

9 months, 3 weeks ago

Provided answers are correct - https://learn.microsoft.com/en-us/entra/identity/app-proxy/application-proxy-add-on-premises-application#add-an-on-premises-app-to-microsoft-entra-id

upvoted 3 times

...

Exam AZ-305 All Questions

View all questions & answers for the AZ-305 exam