Q9
Single choice
You have the following on-premises servers that run Windows Server:
1. Two domain controllers in an Active Directory Domain Services (AD DS) domain
2. Two application servers named Server1 and Server2 that run ASP.NET web apps
3. A VPN server named Served that authenticates by using RADIUS and AD DS
4. End users use a VPN to access the web apps over the internet.
You need to redesign a user access solution to increase the security of the connections to the web apps.
The solution must minimize the attack surface and follow the Zero Trust principles of the Microsoft Cybersecurity Reference Architectures (MCRA).
What should you include in the recommendation?