SC-300 Certification Practice Question #166

Question

You have multiple on-premises devices that run either Windows or Linux.

You have a Microsoft 365 E5 subscription.

You configure Microsoft Entra Internet Access.

You need to ensure that all the on-premises devices access the internet by using Global Secure Access.

What should you do in the Microsoft Entra admin center?

Accepted Answer

The requirement is that *all* on-premises devices — Windows *and* Linux — reach the internet via Global Secure Access. MS Learn is explicit that the GSA client ships only for Windows, macOS, Android, and iOS; there is no Linux client. For devices where the client can't be installed, the documented solution is remote network connectivity: an IPsec tunnel from the branch's core router routes all outbound traffic through the GSA endpoint "regardless of the device where it originated." Deploying the GSA client (D) cannot satisfy "all devices" because the Linux machines have no client, so A is the only option covering the whole fleet. This is backed by the official Suggested Answer, the 9-vote Most Voted, and the top comment (PcsSdm, 👍 4). The D dissent (psp65 👍 3) is the reason confidence sits at 89 rather than higher, but it fails the "all devices" constraint.

More SC-300 practice questions