You have the following on-premises servers that run Windows Server:• Two domain controllers in an...

Microsoft SC-100 Question Answer

You have the following on-premises servers that run Windows Server:

• Two domain controllers in an Active Directory Domain Services (AD DS) domain

• Two application servers named Server1 and Server2 that run ASP.NET web apps

• A VPN server named Server3 that authenticates by using RADIUS and AD DS

End users use a VPN to access the web apps over the internet.

You need to redesign a user access solution to increase the security of the connections to the web apps. The solution must minimize the attack surface and follow the Zero Trust principles of the Microsoft Cybersecurity Reference Architectures (MCRA).

What should you include in the recommendation?

Configure connectors and rules in Microsoft Defender for Cloud Apps.

Configure web protection in Microsoft Defender for Endpoint.

Publish the web apps by using Azure AD Application Proxy.

Configure the VPN to use Azure AD authentication.