You have a hybrid deployment of Microsoft 365 that contains the users shown in the following table

HOTSPOT

You have a hybrid deployment of Microsoft 365 that contains the users shown in the following table.

You have an on-premises web app named AppA. Group1 has permissions to access AppA.

You configure an Azure Active Directory (Azure AD) Application Proxy.

You add an Application Proxy entry for AppA as shown the exhibit. (Click the Exhibit tab.)

You assign the AppA enterprise application in Azure to Group2.

For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

View Answer

Answer:

Explanation:

Box 1: No

User1 is in Group2. The enterprise app is assigned to Group2. However, the authentication method is “Passthrough” so the authentication will be passed to the on-premises web app. Only Group1 has access to the web app. Therefore, User1 will not be able to access the web app.

Box 2: Yes.

User2 is in Group1 and Group2. The enterprise app is assigned to Group2. The authentication method is “Passthrough” so the authentication will be passed to the on-premises web app. Group1 has access to the web app. Therefore, User2 will be able to access the web app in MyApps.

Box 3: No

User3 is in Group1. Group1 has access to the web app so User3 could access the app on-premises. However, the enterprise app is assigned to Group2 which User3 is not a member of. Therefore, User3 will not be able to access the external URL of the web app.