SC-100 Certification Practice Question #185

Question

Your on-premises network contains an Active Directory Domain Services (AD DS) domain. The domain contains a server named Serve1 that runs Windows Server 2022.

You have an Azure subscription that is linked to a hybrid Microsoft Entra tenant and contains a user named User1. User1 works remotely.

You need to ensure that User1 can establish RDP connections to Server1 via the internet. The solution must ensure that User1 authenticates by using multifactor authentication (MFA).

What should you include in the solution?

Accepted Answer

The requirement is internet RDP access to an *on-premises* Windows server with enforced MFA. Microsoft Entra Private Access is the ZTNA solution that publishes private on-premises resources (the docs explicitly list "a server for RDP") through a connector, and access flows through Conditional Access so MFA can be enforced per app. Azure Bastion only brokers RDP/SSH to Azure VMs (not on-premises) and does not natively enforce MFA via Conditional Access. Microsoft Entra Internet Access secures user access to internet/SaaS destinations, not inbound access to a private server, and Windows Admin Center is a management console rather than a remote-access gateway. Suggested Answer, the unanimous Most Voted (D, 6 votes), and the top comment all agree, with MS Learn confirming.

More SC-100 practice questions