Free Microsoft SC-100 Practice Exam with Questions & Answers | Set: 3

https://docs.microsoft.com/en-us/azure/active-directory/app-proxy/application-proxy-configure-single-sign-on-on-premises-apps

https://docs.microsoft.com/en-us/azure/active-directory/app-proxy/application-proxy-configure-single-sign-on- with-kcd

https://doc s.microsoft.com/en-us/azure/active-directory/app-proxy/application-proxy-configure-custom-domain

Box 1: Virtual Network Integration - correct

Virtual network integration gives your app access to resources in your virtual network, but it doesn't grant inbound private access to your app from the virtual network.

Box 2: Private Endpoints. - correct

You can use Private Endpoint for your Azure Web App to allow clients located in your private network to securely access the app over Private Link.

https://docs.microsoft.com/en-us/azure/active-directory/conditio nal-access/concept-conditional-access-session#conditional-access-application-control

https://docs.microsoft.com/en-us/azure/active -directory/app-proxy/application-proxy-integrate-with-microsoft-cloud-application-security

1. Azure AD Identity Protection

Brute Force Detection: https://docs.microsoft.com/en-us/azure/active-directory/identity-protection/overview-identity-protection

2. Defender for Identity

MDI can detect brute force attacks: ref: https://docs.microsoft.com/en-us/defender-for-identity/compromised -credentials-alerts#suspected-brute-force-attack-ldap-external-id-2004