SC-100 Certification Practice Question #129

Question

You have an on-premises server named Server1. Server1 is an FTP server that can be accessed by only the users at your company.

You have an Azure subscription.

You need to recommend a Zero Trust Network Access (ZTNA) solution to enforce Conditional Access policies when users access Server1 from the internet.

What should you include in the recommendation?

Accepted Answer

The requirement is ZTNA with Conditional Access enforcement for users reaching an on-premises FTP server (an arbitrary TCP protocol, not HTTP) from the internet. Microsoft Entra Private Access is Microsoft's identity-centric ZTNA solution that delivers per-app, Conditional-Access-gated access to private/on-premises resources over any TCP/UDP port and protocol via the private network connector — exactly this scenario. It explicitly extends beyond Entra application proxy (which is limited to web apps) to cover non-web protocols such as FTP/RDP/SSH. Suggested Answer, the community ✓, and MS Learn all converge on C, so confidence is high.

More SC-100 practice questions