<< Prev Question Next Question >>
Question 19/71
You have the following on-premises servers that run Windows Server:
* Two domain controllers in an Active Directory Domain Services (AD DS) domain
* Two application servers named Server1 and Server2 that run ASP.NET web apps
* A VPN server named Server3 that authenticates by using RADIUS and AD DS End users use a VPN to access the web apps over the internet.
You need to redesign a user access solution to increase the security of the connections to the web apps. The solution must minimize the attack surface and follow the Zero Trust principles of the Microsoft Cybersecurity Reference Architectures (MCRA).
What should you include in the recommendation?
* Two domain controllers in an Active Directory Domain Services (AD DS) domain
* Two application servers named Server1 and Server2 that run ASP.NET web apps
* A VPN server named Server3 that authenticates by using RADIUS and AD DS End users use a VPN to access the web apps over the internet.
You need to redesign a user access solution to increase the security of the connections to the web apps. The solution must minimize the attack surface and follow the Zero Trust principles of the Microsoft Cybersecurity Reference Architectures (MCRA).
What should you include in the recommendation?
Recent Comments (The most recent comments are at the top.)
C
The Zero Trust model emphasizes never trusting and always verifying, regardless of whether something is inside or outside the corporate network. It minimizes reliance on traditional network security boundaries and instead focuses on identities, endpoints, and resources.In the given scenario, the main goal is to increase the security of connections to the web apps, aligning with the Zero Trust principles.Option A would align well with these requirements. Azure AD Application Proxy provides secure remote access to your on-premises applications. It allows users to access their apps from anywhere without having to connect to the VPN and enables additional security features like Conditional Access and MFA.
This solution minimizes the attack surface by eliminating the need to expose the web applications directly to the internet and follows the Zero Trust principles of MCRA, making it the appropriate recommendation