SC-300 Certification Practice Question #87

Question

You have a Microsoft Entra tenant.

You have the devices shown in the following table.

You configure Microsoft Entra Internet Access for the tenant.

On which devices can you use Global Secure Access?

Accepted Answer

The tenant is configured for **Microsoft Entra Internet Access** (part of Global Secure Access). On Windows, the Global Secure Access client requires the device to be Microsoft Entra **joined** or **hybrid joined**; Microsoft Entra **registered** Windows devices are limited to **Private Access** traffic only, so they cannot use Internet Access. Of the four Windows devices, only Device3 is Entra joined; Device1 and Device4 are registered (Private Access only), and Device2 has no join type at all. This matches the Suggested Answer, the leading community vote, and the two top-voted comments citing the GSA Windows-client prerequisites. Confidence sits in the high-80s because a few commenters confused the (Private-Access-only) registered-device support with Internet Access, but MS Learn is explicit that registered Windows devices carry Private Access traffic only.

More SC-300 practice questions