Question
You plan to deploy an Azure web app named App1 that will use Azure Active Directory (Azure AD) authentication.
App1 will be accessed from the internet by the users at your company. All the users have computers that run Windows 10 and are joined to Azure AD.
You need to recommend a solution to ensure that the users can connect to App1 without being prompted for authentication and can access App1 only from company-owned computers.
What should you recommend for each requirement? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Explanation
An Azure AD app registration integrates App1 with Azure AD. Because the users sign in to Azure AD-joined Windows 10 computers, they hold a Primary Refresh Token and get single sign-on to App1 without being prompted. A Conditional Access policy can require a compliant or Microsoft Entra hybrid joined device for App1, which limits access to company-owned computers. A managed identity is for the app's own access to resources, Application Proxy publishes on-premises apps, and Azure Policy, Blueprints, administrative units and Application Gateway do not check the user's device.
