AZ-305 Exam - Question 12

Question

DRAG DROP -Your on-premises network contains a server named Server1 that runs an ASP. NET application named App1. You have a hybrid deployment of Azure Active Directory (Azure AD). You need to recommend a solution to ensure that users sign in by using their Azure AD account and Azure Multi-Factor Authentication (MFA) when they connect to App1 from the internet. Which three features should you recommend be deployed and configured in sequence? To answer, move the appropriate features from the list of features to the answer area and arrange them in the correct order. Select and Place:.

Examice · Accepted Answer

Step 1: Azure AD Application ProxyStart by enabling communication to Azure data centers to prepare your environment for Azure AD Application Proxy. Step 2: an Azure AD enterprise applicationAdd an on-premises app to Azure AD. Now that you've prepared your environment and installed a connector, you're ready to add on-premises applications to Azure AD. 1. Sign in as an administrator in the Azure portal. 2. In the left navigation panel, select Azure Active Directory. 3. Select Enterprise applications, and then select New application. 4. Etc. Reference:https://docs. microsoft. com/en-us/azure/active-directory/app-proxy/application-proxy-add-on-premises-application.

Eltooth · Answer

Answer is correct.

FrancisFerreira · Answer

Wait, Application Proxy is a feature of Enterprise Applications, so yeah, you would need to register an Enterprise Application before enabling an Application Proxy for it.

While the items themselves are correct, I believe the order should be:
1. Enterprise Application
2. Application Proxy
3. Conditional Access

Gor · Answer

Answer is correct.
1. Application Proxy
2. Enterprise Application
3. Conditional Access

https://docs.microsoft.com/en-us/azure/active-directory/app-proxy/application-proxy-add-on-premises-application

AymanGad · Answer

where are you mlantonis?

DeBoer · Answer

that's one of those "it  depends" question, I gues. Depends on what they mean by "deploying" a "feature"

Of course you'd first need to set up AADProxy in general (install a connector and create a connector group) before being able to chose using it in an Enterprise App.  However, if that's been done already, then you'd create the Enterprise App first and configure the AAD Proxy settings in it (second) ...

Since they're not saying anything I'd assume we're talking about a new environment and needed to set up AADProxy first - and then create the Enterprise app.

Obviously, the Enterprise app would need to exist before being able to secure it using CA Policies, so the third step is not a matter of discussion.

zellck · Answer

1. Azure AD App Proxy
2. Azure AD enterprise app
3. Conditional Access policy

https://learn.microsoft.com/en-us/azure/active-directory/app-proxy/application-proxy-add-on-premises-application

https://learn.microsoft.com/en-us/azure/active-directory/app-proxy/application-proxy
Azure Active Directory's Application Proxy provides secure remote access to on-premises web applications. After a single sign-on to Azure AD, users can access both cloud and on-premises applications through an external URL or an internal application portal.

Azure AD Application Proxy is:
- Secure. On-premises applications can use Azure's authorization controls and security analytics. For example, on-premises applications can use Conditional Access and two-step verification. Application Proxy doesn't require you to open inbound connections through your firewall.

vijaypatelom · Answer

in sequence, I believe first enterprise application should be configure before application proxy can be configured

JoshuaAlkar · Answer

it should be 
1. Enterprise Application
2. Application Proxy
3. Conditional Access

see the steps clearly on this Blog https://thesleepyadmins.com/2019/02/

TonySuccess · Answer

1.. Azure App Proxy: To publish your on-premises applications, such as App1, to be accessible from the cloud1. You need to install and register Application Proxy connectors on your on-premises network, and then publish App1 as an application in Azure AD
2.. Azure AD Ent Application: This is a representation of App1 in Azure AD that allows you to configure its identity, authentication, and authorization settings2. You need to create an enterprise application for App1 and assign users or groups that can access it3. You can also customize the branding and user experience of the sign-in page for App1
3.. CA Policy: This is a policy that defines the conditions under which users can access App1, and the actions that are required or blocked. You need to create a conditional access policy for App1 and enable Azure MFA as a grant control. You can also specify other conditions, such as user location, device state, or sign-in risk.

cheese929 · Answer

Clearly stated in the link below. So the given answer is correct. 
1. Application Proxy
2. Enterprise Application
3. Conditional Access

https://docs.microsoft.com/en-us/azure/active-directory/app-proxy/application-proxy-add-on-premises-application

PeterHu · Answer

Answer is right

ServerBrain · Answer

Given answer is correct, as the url clearly explains the same steps..

OPT_001122 · Answer

1. Application Proxy 
2. Enterprise Application
3. Conditional Access Policy

Given ans is correct (Pro App Pol)

jj22222 · Answer

Ent App
App Proxy
Conditional Access

ZUMY · Answer

Given answers are correct

eli117 · Answer

Azure AD Enterprise Application
Azure AD Application Proxy
Conditional Access Policy

523db89 · Answer

This sequence ensures

App1 is reachable over the internet via Application Proxy
App1 is integrated with Azure AD for authentication
and MFA is enforced using Conditional Access.

Redimido · Answer

Yup, that's right!

makovec25 · Answer

correct

OrangeSG · Answer

Answer is correct.

Steps:
1.	Opens ports for outbound traffic and allows access to specific URLs
2.	Installs the connector on your Windows server, and registers it with Application Proxy
3.	Verifies the connector installed and registered correctly
4.	Adds an on-premises application to your Azure AD tenant
5.	Verifies a test user can sign on to the application by using an Azure AD account

Reference
Tutorial: Add an on-premises application for remote access through Application Proxy in Azure Active Directory
https://learn.microsoft.com/en-us/azure/active-directory/app-proxy/application-proxy-add-on-premises-application

OPT_001122 · Answer

Thanks all who have mentioned the exam dates

orionduo · Answer

The answer is correct.

23169fd · Answer

Given Answer is correct.
Azure AD Application Proxy:

This enables secure remote access to the on-premises web application (App1) through Azure AD.
Azure AD Enterprise Application:

This represents the App1 in Azure AD and allows you to configure settings like SSO and user assignments.
Conditional Access Policy:

This ensures that MFA is enforced when users sign in to App1, providing an additional layer of security.

Teerawee · Answer

1.	Azure AD Application Proxy
2.	Azure AD Enterprise Application
3.	Conditional Access Policy

[Removed] · Answer

CORRECT

AZ-305 Exam - Question 12

Discussion