Managing Modern Desktops (legacy) — Question 53

Your on-premises network contains a database server and is accessible by using a VPN server.
You have a Microsoft 365 tenant.
You manage devices by using Microsoft Endpoint Manager.
You have an application named App1 that is deployed to every computer enrolled in Microsoft Intune. Each computer has a VPN profile assigned.
You need to ensure that App1 can access only the database server. App1 must be prevented from accessing other resources on the on-premises network.
What should you modify in the VPN profile?

Answer options

• A. Proxy
• B. Network traffic rules
• C. DNS Settings
• D. Conditional Access

Correct answer: B

Explanation

The correct answer is B, as modifying the network traffic rules in the VPN profile allows you to specify which resources App1 can access, ensuring it can only reach the database server. The other options, such as Proxy (A), DNS Settings (C), and Conditional Access (D), do not specifically control access to network resources in the same way that network traffic rules do.