AZ-304 Exam - Question 31

Question

HOTSPOT -You plan to deploy an Azure web app named App1 that will use Azure Active Directory (Azure AD) authentication. App1 will be accessed from the internet by the users at your company. All the users have computers that run Windows 10 and are joined to Azure AD. You need to recommend a solution to ensure that the users can connect to App1 without being prompted for authentication and can access App1 only from company-owned computers. What should you recommend for each requirement? To answer, select the appropriate options in the answer area. Hot Area:.

Examice · Accepted Answer

Box 1: An Azure AD app registrationAzure active directory (AD) provides cloud based directory and identity management services. You can use azure AD to manage users of your application and authenticate access to your applications using azure active directory. You register your application with Azure active directory tenant. Box 2: A conditional access policyConditional Access policies at their simplest are if-then statements, if a user wants to access a resource, then they must complete an action. By using Conditional Access policies, you can apply the right access controls when needed to keep your organization secure and stay out of your user's way when not needed. Reference:https://codingcanvas. com/using-azure-active-directory-authentication-in-your-web-application/ https://docs. microsoft. com/en-us/azure/active-directory/conditional-access/overview.

mmmore · Answer

Seems correct.

glam · Answer

Box 1: An Azure AD app registration
Box 2: A conditional access policy

hertino · Answer

In AZ-305 exam, 9 april 22

Tidopuddy · Answer

Box 1. App Proxy
Box 2. Conditional access policy

lowczy · Answer

This question appeared in real exam.

milind8451 · Answer

Right ans.

[Removed] · Answer

How app registration with ad will ensure user can connect without being prompted for authentication?

syu31svc · Answer

https://docs.microsoft.com/en-us/azure/active-directory/app-proxy/application-proxy

Application Proxy is a feature of Azure AD that enables users to access on-premises web applications from a remote client

https://docs.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/overview

Managed identities provide an identity for applications to use when connecting to resources that support Azure Active Directory (Azure AD) authentication

1st drop down is app registration

"access App1 only from company-owned computers" -> this would be conditional access

Ganesh_k · Answer

Ans should be Managed identity and Conditional access
https://docs.microsoft.com/en-us/azure/app-service/overview-managed-identity?tabs=dotnet

teyol51117 · Answer

On exam 31.03.2022

ReginaldoBarreto · Answer

https://docs.microsoft.com/en-us/powerapps/developer/data-platform/walkthrough-register-app-azure-active-directory#:~:text=Create%20an%20application%20registration%201%20Create%20an%20application,the%20options%20and%20click%20on%20Add%20permissions.%20

"After consenting to use their Dataverse account with the ISV's application, end users can connect to Dataverse environment from external application. The consent form is not displayed again to other users after the first user who has already consented to use the ISV's app. Apps registered in Azure Active Directory are multi-tenant, which implies that other Dataverse users from other tenant can connect to their environment using the ISV's app."

ruckii · Answer

only from company own computers.
if we go with app registration, will this be full filed?

red_vix · Answer

very good

plmmsg · Answer

App registration
Conditional access policy

Pinkee888 · Answer

Presented answer is correct. Register the app  uses key vault for authentication, no longer prompts for authentication and restrict access exclusive to company supplied computers through conditional access policy.

Snownoodles · Answer

Azure joined devices can "SSO to both cloud and on-premises resources"
https://learn.microsoft.com/en-us/azure/active-directory/devices/concept-azure-ad-join

AZ-304 Exam - Question 31

Discussion