Continue your lesson
Trace the identity, credential, token, assignment, policy decision, resource, and audit record for each access request.
Block 1 of 3Compare Microsoft Entra Internet Access · Microsoft Entra Private Access
Current · 12 min
Compare Microsoft Entra Internet Access · Microsoft Entra Private Access
Optional concept notes
Microsoft Entra Private Access
Provides identity-aware access to private applications without exposing them directly to the internet.
Microsoft Entra Internet Access
Applies identity and security policy to supported internet and Microsoft 365 traffic.
Complete one provider lesson, then answer four related questions. That is enough for today; more practice is optional.
Your lesson stays open here while the provider opens in another tab. Choose one source; the notes above are optional.
Block 2 of 3Compare Global Secure Access · Traffic forwarding profile · Compliant network condition · Global Secure Access remote network
18 min
Compare Global Secure Access · Traffic forwarding profile · Compliant network condition · Global Secure Access remote network
Optional concept notes
Global Secure Access
Provides the Microsoft Security Service Edge controls for private and internet traffic.
Traffic forwarding profile
Defines which device traffic is sent through Global Secure Access.
Compliant network condition
Uses verified Global Secure Access connectivity as a Conditional Access signal.
Global Secure Access remote network
Connects a branch location so selected traffic can enter the security service edge.
Complete one provider lesson, then answer four related questions. That is enough for today; more practice is optional.
Your lesson stays open here while the provider opens in another tab. Choose one source; the notes above are optional.
Block 3 of 3Compare Private Network connector · Global Secure Access traffic logs
15 min
Compare Private Network connector · Global Secure Access traffic logs
Optional concept notes
Private Network connector
Creates outbound connectivity from a private network to Microsoft Entra Private Access.
Global Secure Access traffic logs
Record forwarded traffic and policy results for investigation and monitoring.
Complete one provider lesson, then answer four related questions. That is enough for today; more practice is optional.
Your lesson stays open here while the provider opens in another tab. Choose one source; the notes above are optional.
Practice the reasoning here
Use a fictional tenant. Draw one access path, apply least privilege, test an exception, and name the logs that would confirm the result.
- State the expected result before changing or testing anything.
- Name the observation, command, log, or report that would confirm it.
- Explain why the closest alternative does not fit the same requirement.
Check the whole objective
This unlocks objective 2.4 for recall. The latest checkpoint needs 70% or higher; a lower result puts the lesson back near the front of your timeline.