Exam MS-100 topic 5 question 35 discussion

Says in the question that it has to specifically support MFA, not implement it. So A/B would set up initially so that you can implement MFA after. To me, it seems they are just trying to catch you out with the wording...

A & C for sure!

AB, not C as Conditional Access enforces MFA and without both the connector (A) and the proxy (B) MFA is not supported thus cannot be enforced with Conditional Access (C)

A & C Why is the "Enable Application Proxy button grayed out? Make sure you have at least an Azure AD Premium P1 or P2 license and an Azure AD Application Proxy Connector installed. After you successfully install your first connector, the Azure AD Application Proxy service will be enabled automatically. https://docs.microsoft.com/en-us/azure/active-directory/app-proxy/application-proxy-faq

came out in exam today

Whether A & B, or A&C, or A,B &C, all three answer selections ignore the element of the question that states the URL is published as https://app.contoso.local. This makes it incompatible with a synchronized connection with Azure AAD M365. An unmentioned step of purchasing a viable domain name is absolutely necessary along with the step mentioned in E. to republish the web application using https://app.contoso.com.

A and C

In exam today

They told You need to recommend a solution for external access to the application. The solution must support multi-factor authentication A. From an on-premises server, install a connector, and then publish the app. B. From the Azure Active Directory admin center, enable an Application Proxy. C. From the Azure Active Directory admin center, create a conditional access policy. A https://docs.microsoft.com/en-us/azure/active-directory/app-proxy/application-proxy-add-on-premises-application B https://docs.microsoft.com/en-us/azure/active-directory/app-proxy/application-proxy-config-how-to https://docs.microsoft.com/en-us/azure/active-directory/app-proxy/application-proxy-add-on-premises-application C means enable MFA https://docs.microsoft.com/en-us/azure/active-directory/authentication/tutorial-enable-azure-mfa They ask for two, when must be three, sio my guest is, A and B, or A and C, or B and C, if you got this question mark for comments

This question is outdated and has a dumb wordplay in it... I seriously hope I don't have it during the exam.

This question seems to be outdated. Step B is no longer required. https://docs.microsoft.com/en-us/azure/active-directory/manage-apps/application-proxy-faq#why-is-the-enable-application-proxy-button-grayed-out

App proxy is automatically enabled when you install the connector: After you successfully install your first connector, the Azure AD Application Proxy service will be enabled automatically. https://docs.microsoft.com/en-us/azure/active-directory/manage-apps/application-proxy-faq So you don't have to enable it as stated in B?

doco from references doesn't say that we need to enable connector in Azure portal, it says only that we need to download and install the connector. My guess is also A and C

This doesn't make sense. Surely there are 3 steps required. A,B and C.

I don't get it. 1. install a application proxy on-premise 2. Create an Enterprise Application in Azure 3. Create a Conditional Access policy --> enable MFA