Exam SC-300 topic 3 question 3 discussion

Actual exam question from Microsoft's SC-300

Question #: 3
Topic #: 3

You have a Microsoft 365 tenant.
The Azure Active Directory (Azure AD) tenant syncs to an on-premises Active Directory domain.
Users connect to the internet by using a hardware firewall at your company. The users authenticate to the firewall by using their Active Directory credentials.
You plan to manage access to external applications by using Azure AD.
You need to use the firewall logs to create a list of unmanaged external applications and the users who access them.
What should you use to gather the information?

A. Application Insights in Azure Monitor
B. access reviews in Azure AD
C. Cloud App Discovery in Microsoft Cloud App Security
D. enterprise applications in Azure AD

Show Suggested Answer

Suggested Answer: C 🗳️

by zed01 at May 11, 2021, 3:38 a.m.

Comments

Submit Cancel

zed01

Highly Voted 3 years, 11 months ago

C is correct according to the link provided.

upvoted 9 times

tatendazw

3 years, 5 months ago

Correct, https://docs.microsoft.com/en-us/cloud-app-security/discovered-apps

upvoted 1 times

...

Obi_Wan_Jacoby

Most Recent 6 days, 21 hours ago

Selected Answer: C

Correct, answer C

upvoted 1 times

...

RemmyT

10 months, 1 week ago

Selected Answer: C

Microsoft Defender portal Cloud Apps blade Cloud Discovery Create new report Create new Cloud Discovery snapshot report Source Select appliance : We have a lot of options firewall applicances from: Barracuda, Check Point, Cisco, Dell SonicWall, Forcepoint, Fortinet, Juniper, Palo Alto etc. W3C, CSV, XML, CEF etc file format Upload traffic logs Files with activities up to 90 days old and up to 1 GB in size per log file

upvoted 1 times

...

haazybanj

1 year, 5 months ago

Selected Answer: C

To gather information about unmanaged external applications and the users who access them, you should use Cloud App Discovery in Microsoft Cloud App Security. Cloud App Discovery is a feature of Microsoft Cloud App Security that allows you to discover and gain visibility into the cloud applications being used in your organization. It provides insights into the usage of both managed and unmanaged applications, including information about the users accessing those applications.

upvoted 1 times

...

EmnCours

1 year, 8 months ago

Selected Answer: C

Correct Answer: C

upvoted 1 times

...

OK2020

1 year, 9 months ago

A question to the wider community, why did you all thought of MCAS when teh questions says " need to use the firewall logs" referring to the on-prem FW appliance! The question didn't open teh door/option to use external FW service. In MPOV, it's teh Azure monitor that can used to collect logs from teh existing FW and anlysed to acheive teh requesed outcome. Have a look at this link: Can Azure Monitor also monitor on-premises resources? Yes. In addition to collecting monitoring data from Azure resources, Azure Monitor can collect data from virtual machines and applications in other clouds and on-premises. See Sources of monitoring data for Azure Monitor. https://learn.microsoft.com/en-us/azure/azure-monitor/faq My suggested answer is" Azure Monitor"

upvoted 2 times

cgonIT

1 year, 6 months ago

To add more information to your comment: https://learn.microsoft.com/en-us/azure/azure-monitor/app/app-insights-overview?tabs=net "Firewall settings must be adjusted for data to reach ingestion endpoints". But here is the most reasonable answer. MCASB can only monitor accesses to "unmanaged external applications" but can´t see on-prem FW logs, that is the question.

upvoted 1 times

...