Question
You have an Azure Active Directory (Azure AD) tenant that syncs with an on-premises Active Directory domain.
You have an internal web app named WebApp1 that is hosted on-premises. WebApp1 uses Integrated Windows authentication.
Some users work remotely and do NOT have VPN access to the on-premises network.
You need to provide the remote users with single sign-on (SSO) access to WebApp1.
Which two features should you include in the solution? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
- A. Azure AD Application Proxy Correct
- B. Azure AD Privileged Identity Management (PIM)
- C. Conditional Access policies
- D. Azure Arc
- E. Azure AD enterprise applications Correct
- F. Azure Application Gateway
Explanation
Azure AD Application Proxy (Option A) allows remote users to access on-premises web apps without a VPN by proxying the requests through Azure. Azure AD enterprise applications (Option E) enable configuring single sign-on for WebApp1, allowing seamless authentication via Azure AD credentials.
