SC-300 Certification Practice Question #174

Question

You have a Microsoft Entra tenant that contains 1,000 users. The users are assigned Microsoft Entra Suite licenses.

You perform the following actions:

•	Deploy Global Secure Access.
•	Create a Global Secure Access security profile named Profile1.
•	Create the following Conditional Access policies:
o	Name: CApolicy1
o	Target resources: All internet resources with Global Secure Access

o	Name: CApolicy2
o	Session:
 -	Use Global Secure Access security profile: Profile1

To which Global Secure Access traffic forwarding profiles is CAPolicy1 linked, and to which profile does Profile1 apply? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Accepted Answer

CAPolicy1 targets "All internet resources with Global Secure Access." MS Learn states this target group enforces both the Internet Access *and* the Microsoft traffic forwarding profiles — the documented way to scope a policy to internet access alone (excluding Microsoft traffic) is to choose "Select resources" instead, which CAPolicy1 does not do. Hence Row 1 = Microsoft traffic + Internet access. Profile1 is a Global Secure Access *security profile* delivered through CAPolicy2's session control ("Use Global Secure Access security profile"); security profiles group web-filtering policies that apply specifically to Internet Access traffic, so Profile1 applies to the Internet access profile. Confidence is held at 83 because the discussion records no Suggested Answer or vote tally to corroborate, though MS Learn resolves both rows unambiguously.

More SC-300 practice questions