SC-300 Certification Practice Question #162

Question

You have a Microsoft 365 subscription.

You have an Azure subscription that contains an Azure App Service web app named App1.

You have multiple devices that run Windows and are enrolled in Microsoft Intune.

You deploy the Global Secure Access client to the devices by using Intune.

You need to configure private access to App1.

What should you do next?

Accepted Answer

The official Suggested Answer and the Most Voted community choice both select C, and MS Learn's per-app Private Access quickstart lists the private network connector as the prerequisite that brokers traffic to a private application before the Private Access forwarding profile can carry anything — "Private Network Connectors are required for Private Access applications." With the GSA client already deployed via Intune, the next configuration step is deploying the connector. The dissent for B (f8c6a5b, 3 👍) is genuinely reasonable: because App1 is an Azure App Service web app, it could be exposed via an Azure Private Endpoint and reached without an on-premises connector, in which case the next step would be the traffic forwarding profile. That ambiguity (the question never states App1 sits behind a Private Endpoint) is why confidence is lowered to 80; following Microsoft's standard documented Private Access sequence, C is the better-supported answer.

More SC-300 practice questions