Practice Test 2 | Microsoft Azure Security Technologies | AZ-500 | Dumps | Mock Test

Answer – B

Here resources at on-premises are using the Internet using NAT Device. This means outbound for the Internet is NAT device. But Inboound request from resources on the Internet is accessible or not depends on if public IP or public DNS name has been assigned to NAT device, which is not clear in the question.

Additionally, as you know following are 3 way to establish a connection between On-premises and Azure VNet

Point-to-site virtual private network (VPN)
Site-to-site VPN
Azure ExpressRoute

Ref. URL: https://docs.microsoft.com/en-us/azure/virtual-network/virtual-networks-overview#why-use-an-azure-virtual-network

This means NAT device is not used to establish a connection between On-Premises and Azure VNet.

Here the location falls under the category for skipping multi-factor authentication, hence MFA will not be required.

1. Skip MFA for request from federated users on my Internet
2. Skip MFA for requests from following range of IP adress subnets

•     Whitelisted IP Subnets are 10.12.0.0/16 and 190.20.2.0/24
•     User whizlabusrB signs into Azure from the Ohio office which has IP 10.12.0.0/16 which is whitelisted

For more information on multi-factor authentication, one can visit the below URL-

https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-mfa-howitworks

—————————————————————————————

Note:

In the user service setting , we have 3 sections, and section 2nd is about whitelisting/exemption condition for not to prompt MFA