StudyByteLearn
← SC-100: Microsoft Cybersecurity Architect
SC-100 · SaaS PaaS IaaS containers and AI services

Practice question 324 of 498 · hard

After making an App Service private, which two checks demonstrate the intended ingress boundary? Select two.

Select all that apply. Every correct option and no extras are required for credit in the app.

  1. A.Public internet clients cannot use an unintended public entry point
  2. B.The app’s outbound integration is used as proof of inbound isolation
  3. C.Every caller receives administrator access after resolving DNS
  4. D.Authorized private clients resolve and reach the private endpoint
  5. E.Private endpoint creation is accepted without any connectivity tests
Show the answer and explanation

✓ Correct answers

  • Public internet clients cannot use an unintended public entry point
  • Authorized private clients resolve and reach the private endpoint

Positive private-path testing and negative public-path testing verify ingress. DNS resolution should not confer application administration. Untested creation is insufficient. Outbound integration is a separate direction and cannot prove inbound isolation.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material. Not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product capabilities and exam objectives can change; verify current Microsoft documentation. Practice scores do not predict or guarantee an exam result.