SC-300 Certification Practice Question #181

Question

You have a Microsoft 365 tenant.
The Azure Active Directory (Azure AD) tenant syncs to an on-premises Active Directory domain.
Users connect to the internet by using a hardware firewall at your company. The users authenticate to the firewall by using their Active Directory credentials.
You plan to manage access to external applications by using Azure AD.
You need to use the firewall logs to create a list of unmanaged external applications and the users who access them.
What should you use to gather the information?

Accepted Answer

The task is to take on-premises firewall traffic logs and turn them into a list of unmanaged (Shadow IT) external applications plus the users accessing them. MS Learn states Cloud Discovery (Microsoft Cloud App Discovery, now Microsoft Defender for Cloud Apps) analyzes traffic logs from firewalls/proxies against a catalog of 31,000+ cloud apps to surface Shadow IT and unsanctioned-app usage, and you can upload those firewall logs directly to build the report — which RemmyT confirms by naming the supported firewall appliances. None of the other options ingest firewall logs to discover unmanaged apps: Application Insights is application performance monitoring, access reviews recertify existing access, and Enterprise applications only shows apps already integrated with Azure AD. Suggested Answer, an effectively unanimous Most Voted, and MS Learn all agree, with only a single low-vote dissent toward Azure Monitor, so confidence is 90%.

More SC-300 practice questions