SC-100 Certification Practice Question #181

Question

You have a Microsoft Entra tenant named contoso.com and use Microsoft Intune. Each user in contoso.com has a Microsoft Entra ID P1 license and a Windows 11 device that has the Global Secure Access client deployed.

You plan to deploy the following configuration of Microsoft Entra Internet Access:

•	Enable a baseline profile.
•	Create a security profile named Profile1 that has a priority of 300 and contains a single web content filtering policy named
WCFPolicy1. Configure WCFPolicy1 as follows:
o	Set Action to allow.
o	Include a single rule that has a fully qualified domain name (FQDN) destination of *.adatum.com.
•	Link Profile1 to a Conditional Access policy named CAPolicy1, apply CAPolicy1 to all users, and grant access unless a user's device is noncompliant.

You need to evaluate the impact of the planned deployment on traffic to the following resources:

•	https://www.adatum.com:8433
•	https://www.fabrikam.com

Which two traffic scenarios will occur? Each correct answer presents a complete solution.

NOTE: Each correct selection is worth one point.

Accepted Answer

WCFPolicy1 allows `*.adatum.com` and FQDN-based allow rules match on the SNI/FQDN without a port restriction, so `www.adatum.com:8433` matches the allow rule; because Profile1 is delivered through CAPolicy1 (grant unless noncompliant), that allow is effective only on compliant devices → E. fabrikam.com has no explicit policy, but the baseline profile is a catch-all over all GSA traffic and CAPolicy1 is applied to all users, so fabrikam access is still contingent on device compliance → D. The Suggested Answer (E) and Most Voted (DE) align on E, and the plurality plus the most-recent reasoned comments choose DE. Confidence is held at 76% because the second selection is genuinely contested: the Highly Voted Luweho comment argues the CA grant does not reach non-profile resources (making it A, not D), and the P1-vs-P2 licensing/port arguments (B) muddy the field. MS Learn supports compliance gating applying broadly, breaking the tie toward DE.

More SC-100 practice questions