Enable Private Access Profile in Microsoft Entra Global Secure Access
Short answer
B Use the Traffic forwarding blade in the Microsoft Entra admin center to enable the Private access profile.
Question
Key Takeaways
The question tests navigation within Global Secure Access; the trap is confusing Security profiles with Traffic forwarding, as the latter manages the actual access policies and profiles.
This question tests the configuration of Microsoft Entra Global Secure Access, specifically how to enable the Private Access profile. The correct location for this setting is the Traffic forwarding blade.
Common mistake: Many candidates select Security profiles (C), assuming that 'profiles' are managed under a security-specific blade, but the documentation explicitly places traffic-related profiles under Traffic forwarding.
Expert Analysis
Why the Answer Is Correct
To enable the Private Access profile in Microsoft Entra Global Secure Access, you must navigate to the Traffic forwarding blade. According to official Microsoft documentation, the Private Access profile is configured and enabled within the Traffic forwarding section to define how traffic is routed to private endpoints.
Why the Other Options Are Wrong
Remote networks (A) are used for configuring site-to-site connections, not application access profiles. Security profiles (C) typically manage threat protection settings like Defender for Cloud Apps integration, not the enabling of access routing profiles. Connectors (D) refer to the infrastructure components required for connectivity, not the policy configuration itself.
Community Comment Notes
Community consensus strongly supports Traffic forwarding, with users citing the specific documentation path. One user noted that the Private Access profile is found under "Global Secure Access > Connect > Traffic forwarding." Another confirmed that while Security profiles exist, they do not host the Private Access toggle.
Official Reference
This link opens the official vendor documentation in a new tab.
Exam Strategy
When configuring Global Secure Access, remember that Traffic forwarding handles the routing and access profiles (Private and Internet), while Remote Networks handle the backend connectivity. Focus on the functional purpose of each blade rather than just the name.
Frequently Asked Questions
Where exactly is the Private Access profile located?
What is the difference between Traffic forwarding and Security profiles?
Community Votes
83% of anonymous learners picked answer B. Votes are pick records left by other test-takers — they are not the verified answer.
Discussion 3 contributions
Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.
From public community threads 3
-
Sunth65 👍 4 Answered BEnable the Private Access traffic forwarding profile Browse to Global Secure Access > Connect > Traffic forwarding. Select the checkbox for Private Access profile.
-
Rackup 👍 1 Answered CTo enable Microsoft Entra Private Access, you must first configure and enable a Private Access profile, which is managed under the Security profiles blade in the Microsoft Entra admin center. Steps to enable Private Access: Go to the Microsoft Entra admin center. Navigate to Global Secure Access. Select Security profiles. Configure and enable the Private Access profile. This ensures that Microsoft Entra Private Access can securely publish on-premises applications without requiring a traditional VPN.
-
YesPlease 👍 1 Answered BAnswer B) Traffic Forwarding https://learn.microsoft.com/en-us/entra/global-secure-access/concept-traffic-forwarding#private-access
Reader comments & corrections
No reader corrections yet — spotted an error or have a note? Share it below.
Related Analysis
Practice All SC-300 Questions
Access 80 questions with complete answers and detailed explanations.
View Full SC-300 Practice Test →