StudyByteLearn
← SC-100: Microsoft Cybersecurity Architect
SC-100 · Network security and Security Service Edge

Practice question 366 of 498 · hard

A proposed VPN replacement grants every employee a broad private IP range. Payroll needs a smaller authorized group and different access conditions. Which two changes fit the requirement? Select two.

Select all that apply. Every correct option and no extras are required for credit in the app.

  1. A.Use network reachability as a substitute for payroll authorization
  2. B.Assign only the required users and apply payroll-specific Conditional Access
  3. C.Assume any Quick Access user should read payroll records
  4. D.Grant connector administrators membership to every payroll business role
  5. E.Define payroll as a scoped per-app private resource
Show the answer and explanation

✓ Correct answers

  • Assign only the required users and apply payroll-specific Conditional Access
  • Define payroll as a scoped per-app private resource

Per-app scope with explicit users and Conditional Access reduces the network-access boundary. Broad tunnel access does not establish data authorization. Payroll authorization remains necessary. Connector administration should not imply business-data entitlements.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material. Not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product capabilities and exam objectives can change; verify current Microsoft documentation. Practice scores do not predict or guarantee an exam result.