Azure AD Tenant Management Solution: Best Practices and Recommendations

Ensure On-Premises Network Security for Azure AD Tenant Management

Question

You have a hybrid deployment of Azure Active Directory (Azure AD).

You need to recommend a solution to ensure that the Azure AD tenant can be managed only from the computers on your on-premises network.

What should you include in the recommendation?

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B. C. D.

B

The correct answer for this question is B. a conditional access policy.

Explanation:

A conditional access policy allows you to set conditions that must be met before a user can access a resource. By using a conditional access policy, you can control who has access to your Azure AD tenant and from where.

To ensure that the Azure AD tenant can be managed only from the computers on your on-premises network, you can create a conditional access policy that only allows access from a specific IP address range. This will prevent anyone from accessing your Azure AD tenant from outside your on-premises network.

Azure AD roles and administrators, Azure AD Application Proxy, and Azure AD Privileged Identity Management are not relevant solutions for this scenario.

Azure AD roles and administrators are used to assign specific permissions to users or groups to manage Azure AD resources. This will not prevent access from outside your on-premises network.

Azure AD Application Proxy allows you to securely publish on-premises web applications to remote users. This solution is not relevant for this scenario.

Azure AD Privileged Identity Management is used to manage and monitor privileged access to Azure resources. While this solution can help you manage access to Azure resources, it does not provide a solution for limiting access to your Azure AD tenant from outside your on-premises network.