Microsoft Entra Internet Access Device Support

SC-300 By islever Editorial Last updated

Implement Global Secure Access

Short answer

B Only Device3 is supported because Entra Registered devices are explicitly unsupported.

Question

You have a Microsoft Entra tenant. You have the devices shown in the following table. You configure Microsoft Entra Internet Access for the tenant. On which devices can you use Global Secure Access? - Exhibit: Microsoft Entra Internet Access Device Support
  1. Device1 only
  2. Device3 only Correct Answer
  3. Device1 and Device2 only
  4. Device1, Device3, and Device4 only
  5. Device1, Device2, Device3, and Device4

Key Takeaways

Tests the specific prerequisite that Entra Registered devices are not supported for Global Secure Access clients.

Determines device compatibility for Microsoft Entra Internet Access by excluding Entra Registered devices.

Common mistake: Learners often select options including all joined/registered devices, missing the distinction between Registered and Joined/Compliant.

Expert Analysis

Why the Answer Is Correct

The correct answer is B (Device3 only) because Microsoft Entra Internet Access requires devices to be Entra Joined, Compliant, or Hybrid Azure AD Joined. The official documentation explicitly states that "Microsoft Entra registered devices aren't supported." Device1 is Entra Registered, so it is excluded. Device2 is likely a standard personal device (not managed), and Device4 might be a non-Windows client or another unsupported type depending on the specific image details which usually show Device3 as the sole Entra Joined/Compliant Windows device in this exam pattern.

Why the Other Options Are Wrong

Option A is incorrect because it excludes valid devices like Device3. Option C includes Device1 (Registered) and Device2 (likely unsupported). Option D includes Device1 (Registered) and Device4 (often a Mac/Linux device which may have different support status or be excluded in this specific question context). Option E includes all devices, failing to exclude the unsupported Registered and unmanaged types.

Community Comment Notes

Comments from users JFROG and _kkl confirm that the key constraint is found in the prerequisites: "Microsoft Entra registered devices aren't supported." User TRN80 argues for D, suggesting Registered devices are acceptable, but this contradicts the official Microsoft Learn link provided in the comments. The consensus among high-vote comments aligns with B, citing the exclusion of Registered devices.

Official Reference

https://learn.microsoft.com/en-us/entra/global-secure-access/how-to-install-windows-client

This link opens the official vendor documentation in a new tab.

Exam Strategy

Always check the 'Prerequisites' section for feature-specific device requirements. Note that 'Entra Registered' (personal devices signed into an app) is distinct from 'Entra Joined' (corporate managed) and is frequently unsupported for enterprise security features.

Frequently Asked Questions

Why are Entra Registered devices not supported?

Entra Registered devices are typically personal devices with limited management capabilities, lacking the full compliance and configuration profiles required for secure internet access policies.

What device types ARE supported?

Supported devices include Entra Joined, Entra Compliant, and Hybrid Azure AD Joined devices running supported OS versions.

More SC-300 FAQ →

Community Votes

B
83%
D
17%

83% of anonymous learners picked answer B. Votes are pick records left by other test-takers — they are not the verified answer.

Discussion 3 contributions

Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.

From public community threads 3

  1. JFROG 👍 3 Answered B
    I'm going for option B. Look at the Prerequisites where it says Microsoft Entra registered devices aren't supported. https://learn.microsoft.com/en-us/entra/global-secure-access/how-to-install-windows-client
  2. _kkl 👍 2 Answered B
    The learn link clearly states registered devices are not supported https://learn.microsoft.com/en-us/entra/global-secure-access/how-to-install-windows-client
  3. TRN80 👍 1 Answered D
    To use Microsoft Entra Internet Access, the device must be associated with Microsoft Entra in some way, either through being Microsoft Entra Registered or Microsoft Entra Joined. This association ensures that the device can be managed and secured according to your organization's policies and access controls. To use Microsoft Entra Internet Access, the device's operating system must be supported by Microsoft Entra. Here are the general OS requirements: Windows: Windows 10 and later versions are supported. Ensure that the devices are updated with the latest security patches and updates. macOS: macOS 10.15 (Catalina) and later versions are supported. iOS/iPadOS: iOS 13 and later versions are supported. Android: Android 8.0 (Oreo) and later versions are supported.

Reader comments & corrections

No reader corrections yet — spotted an error or have a note? Share it below.

Log in to comment, report an error, or add a note about this question.

How Long Are Microsoft Entra Risky User Activity Logs Retained?

S-grade

Azure User-Assigned Managed Identity Regional Scope

S-grade

Which role for the Permissions Management service principal?

S-grade

Prerequisite for Microsoft Defender for Cloud Apps Session Policy

S-grade

Practice All SC-300 Questions

Access 80 questions with complete answers and detailed explanations.

View Full SC-300 Practice Test →

← Back to SC-300 Study Guide