SC-100 Certification Practice Question #217

Question

You have an on-premises app named App1.

Remote users access App1 by using VPN connections.

You have a third-party software as a service (SaaS) app named App2.

You need to deploy Global Secure Access to manage access to App1 and App2.

What should you use for each app?

Accepted Answer

App1 is an on-premises application reached today over VPN — exactly the private corporate resource that Microsoft Entra Private Access (a ZTNA solution built on Entra application proxy) is designed to publish without a VPN. App2 is a third-party SaaS app, which is internet-facing traffic secured by Microsoft Entra Internet Access. MS Learn cleanly maps these two pillars of Global Secure Access, matching choice B, and both the official Suggested Answer and the dominant community vote agree. The lone dissent (A) inverts the two services, contradicting the documented purpose of each.

More SC-100 practice questions