SC-300 Certification Practice Question #172

Question

You have a Microsoft Entra tenant that contains 1,000 users. The users are assigned Microsoft Entra Suite licenses.
You are deploying Global Secure Access.

You need to ensure that connections to www.microsoft.com are bypassed by Global Secure Access.

Which profiles should you update?

Accepted Answer

www.microsoft.com is a Microsoft destination, so it is governed exclusively by the **Microsoft traffic profile**. MS Learn states that traffic available for acquisition in the Microsoft traffic profile can *only* be acquired there, and that once a rule is set to **Bypass** in the Microsoft profile the Internet Access profile will not acquire it even when Internet forwarding is enabled. Therefore updating only the Microsoft traffic profile (a Bypass rule) is sufficient, and touching the Internet access profile is redundant — eliminating C. A is wrong because the Internet profile doesn't carry Microsoft FQDNs, and D needlessly involves Private Access, which is for on-prem/private resources. The minority "C" vote (4f13cca 👍 3) is plausible-sounding but is directly contradicted by the documented profile precedence, so it is discounted; confidence is held at 83 because the community shows a real B-vs-C split even though the Suggested Answer, Most Voted, and MS Learn all converge on B.

More SC-300 practice questions