Which Devices Support Global Secure Access Client?

Implement Global Secure Access

Answer Correct answer: B — Only Device3 satisfies the Global Secure Access client prerequisite of being Microsoft Entra joined or hybrid joined on a supported Windows version.

You have a Microsoft Entra tenant. You have the devices shown in the following table. exhibit You configure Microsoft Entra Internet Access for the tenant. On which devices can you use Global Secure Access?

Device1 only
Device3 only Correct Answer
Device1 and Device2 only
Device1, Device3, and Device4 only
Device1, Device2, Device3, and Device4

Community Insight

The tested concept is the Global Secure Access client prerequisite list; the trap is assuming that any Windows device with any kind of Entra association (including Microsoft Entra registered) qualifies.

Microsoft Entra Internet Access is delivered through the Global Secure Access client, which has strict device prerequisites. This question establishes that only devices meeting the Entra join-state and supported Windows OS requirements can run the client.

The most common wrong answer is D (Device1, Device3, Device4), chosen because learners believe Microsoft Entra registered devices are supported. Microsoft's Windows client prerequisites explicitly exclude Entra registered devices, which are supported only in preview and are not valid for the exam's intended answer.

Community Discussion (10 comments)

JOCER 👍 1 Selected: D

La respuesta correcta es D. Device1, Device3, and Device4 only. Justificación:Para instalar y utilizar el cliente de Global Secure Access (utilizado para Microsoft Entra Internet Access y Private Access), los dispositivos deben cumplir dos requisitos principales:Sistema operativo compatible:Soporta Windows 10 (versiones de 64 bits compatibles) y Windows 11. Todos los dispositivos de la lista cumplen esta condición. Registro/Unión en Microsoft Entra ID (Identity Requirement):El cliente de Global Secure Access exige que el dispositivo esté integrado en el directorio. Esto significa que debe estar Microsoft Entra joined o Microsoft Entra registered (o Hybrid Entra joined).

raduM 👍 3 Selected: D

go with d or pehaps e

mamadou00225 👍 4 Selected: C

Prerequisites A Microsoft Entra tenant onboarded to Global Secure Access. A device joined to or registered (preview) in the onboarded tenant: The device must be Microsoft Entra joined, Microsoft Entra hybrid joined, or Microsoft Entra registered.

Gattardi 👍 1 Selected: E

This is an incomplete question. Global Secure access can be used in 2 different ways. Client-Based Access and Clientless Access. For the clientless approach, the "joined or hybrid joined" pre requisite for devices DO NOT APPLY, so, technically, you can use Gobal Secure Access in any Windows 10 or Windows 11 device. It is to say that the joined pre requisite is for the client installation, no for the use of Global Secure Access itself. Anyway, for the exam I would choose answer B

krzkrzkra 👍 1 Selected: B

B. Device3 only

_kkl 👍 4 Selected: B

The learn link clearly states registered devices are not supported https://learn.microsoft.com/en-us/entra/global-secure-access/how-to-install-windows-client

JFROG 👍 4 Selected: B

I'm going for option B. Look at the Prerequisites where it says Microsoft Entra registered devices aren't supported. https://learn.microsoft.com/en-us/entra/global-secure-access/how-to-install-windows-client

TRN80 👍 1 Selected: D

To use Microsoft Entra Internet Access, the device must be associated with Microsoft Entra in some way, either through being Microsoft Entra Registered or Microsoft Entra Joined. This association ensures that the device can be managed and secured according to your organization's policies and access controls. To use Microsoft Entra Internet Access, the device's operating system must be supported by Microsoft Entra. Here are the general OS requirements: Windows: Windows 10 and later versions are supported. Ensure that the devices are updated with the latest security patches and updates. macOS: macOS 10.15 (Catalina) and later versions are supported. iOS/iPadOS: iOS 13 and later versions are supported. Android: Android 8.0 (Oreo) and later versions are supported.

9H3zmT6 👍 1

The prerequisites differ depending on the client OS. In the case of Windows, it must be Entra Joined or Hybrid Joined. Since all the client OS presented in this question are Windows, the answer is B.

hitten_za 👍 1 Selected: D

As of 14/10/2026 - A device joined to or registered (preview) in the onboarded tenant: The device must be Microsoft Entra joined, Microsoft Entra hybrid joined, or Microsoft Entra registered.

Comments & Corrections

No comments yet — spotted an error or have a note? Share it below.

Expert Analysis

Why the Answer Is Correct

Option B, Device3 only, is correct because the Global Secure Access (Windows) client prerequisites state that the device must be Microsoft Entra joined or Microsoft Entra hybrid joined in the onboarded tenant and must run a supported 64-bit Windows 10 or Windows 11 edition. Devices that are only Microsoft Entra registered do not satisfy the requirement documented in the how-to-install-windows-client article, so any device in the table that is registered or otherwise not joined/hybrid joined is disqualified. This leaves only the single device that is Entra joined (or hybrid joined) on a supported Windows build — Device3.

Why the Other Options Are Wrong

Options A, C, and D all include devices that fail at least one prerequisite, most commonly because they are Microsoft Entra registered rather than joined or hybrid joined, or because the OS/build is not on the supported list. Option E is doubly wrong because it implies every listed device qualifies regardless of join state or operating system. The distractor design deliberately exploits the confusion between "associated with Entra in some way" and the specific join-state requirement for the client.

Community Comment Notes

Several commenters converged on B, with JFROG stating "I'm going for option B. Look at the Prerequisites where it says Microsoft Entra registered devices aren't supported" and krzkrzkra answering "B. Device3 only". One commenter, mamadou00225, argued for C by quoting a broader prerequisite listing "Microsoft Entra joined, Microsoft Entra hybrid joined, or Microsoft Entra registered," and hitten_za made a similar point, but the registered option is marked preview and is not the supported baseline the exam expects. Gattardi correctly noted the question is ambiguous because "Global Secure access can be used in 2 different ways. Client-Based Access and Clientless Access," yet the client-based install path is what the exam is testing.

Official Reference

https://learn.microsoft.com/en-us/entra/global-secure-access/how-to-install-windows-client

Exam Strategy

Always check the Global Secure Access client prerequisite matrix: supported OS + Entra join state (joined or hybrid joined). Treat "Microsoft Entra registered" as unsupported unless the question explicitly states the preview feature is enabled.

Frequently Asked Questions

Are Microsoft Entra registered devices supported by the Global Secure Access client?

No for exam purposes. The Windows client prerequisites require Microsoft Entra joined or hybrid joined; Entra registered support is preview only and is excluded from the intended answer.

Which operating systems can run the Global Secure Access client?

Supported clients are 64-bit Windows 10 (supported versions) and Windows 11. Devices on other operating systems cannot install the Windows client for Microsoft Entra Internet Access.

More SC-300 FAQ →

Related Analysis

Practice All SC-300 Questions

Access 80 questions with complete answers and detailed explanations.

View Full SC-300 Practice Test →

← Back to SC-300 Study Guide