You need to recommend a solution to scan the application code. The solution must meet the application development requirements. What should you include in the recommendation?

Application Insights in Azure Monitor

You need to recommend a solution to resolve the virtual machine issue. What should you include in the recommendation? (Choose Two)

Onboard the virtual machines to Microsoft Defender for Endpoint.

Enable the Qualys scanner in Defender for Cloud.

Onboard the virtual machines to Microsoft Defender for Endpoint.

Onboard the virtual machines to Azure Arc.

Create a device compliance policy in Microsoft Endpoint Manager.

Enable the Qualys scanner in Defender for Cloud.

You need to recommend a solution to secure the MedicalHistory data in the ClaimsDetail table. The solution must meet the Contoso developer requirements. What should you include in the recommendation?

Transparent Data Encryption (TDE)

To meet the application security requirements, which two authentication methods must the applications support? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

Security Assertion Markup Language (SAML)

certificate-based authentication

You need to design a strategy for securing the SharePoint Online and Exchange Online dat a. The solution must meet the application security requirements. Which two services should you leverage in the strategy? Each correct answer presents part of the solution. NOTE; Each correct selection is worth one point.

Microsoft Defender for Cloud Apps

Microsoft Defender for Endpoint

Your company has on-premises Microsoft SQL Server databases.The company plans to move the databases to Azure.You need to recommend a secure architecture for the databases that will minimize operational requirements for patching and protect sensitive data by using dynamic data masking. The solution must minimize costs. What should you include in the recommendation?

Azure Synapse Analytics dedicated SQL pools

SQL Server on Azure Virtual Machines

You have an Azure subscription that contains several storage accounts. The storage accounts are accessed by legacy applications that are authenticated by using access keys. You need to recommend a solution to prevent new applications from obtaining the access keys of the storage accounts. The solution must minimize the impact on the legacy applications. What should you include in the recommendation?

Apply read-only locks on the storage accounts.

Set the AllowSharcdKeyAccess property to false.

Set the AllowBlobPublicAcccss property to false.

Configure automated key rotation.

Azure subscription that uses Azure Storage.The company plans to share specific blobs with vendors. You need to recommend a solution to provide the vendors with secure access to specific blobs without exposing the blobs publicly. The access must be t\me-Vim\ted. What should you include in the recommendation?

Configure encryption by using customer-managed keys (CMKs)

Create shared access signatures (SAS).

Share the connection string of the access key.

Configure private link connections.

Configure encryption by using customer-managed keys (CMKs)

You are planning the security requirements for Azure Cosmos DB Core (SQL) API accounts. You need to recommend a solution to audit all users that access the data in the Azure Cosmos DB accounts. Which two configurations should you include in the recommendation? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

Send the Azure Active Directory (Azure AD) sign-in logs to a Log Analytics workspace.

Disable local authentication for Azure Cosmos DB.

Enable Microsoft Defender for Cosmos DB.

Send the Azure Active Directory (Azure AD) sign-in logs to a Log Analytics workspace.

Disable local authentication for Azure Cosmos DB.

Enable Microsoft Defender for Identity.

Send the Azure Cosmos DB logs to a Log Analytics workspace.

You need to design a solution to provide administrators with secure remote access to the virtual machines. The solution must meet the following requirements:• Prevent the need to enable ports 3389 and 22 from the internet.• Only provide permission to connect the virtual machines when required.• Ensure that administrators use the Azure portal to connect to the virtual machines.Which two actions should you include in the solution? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

Enable just-in-time (JIT) VM access.

Enable Azure Active Directory (Azure AD) Privileged Identity Management (PIM) roles as virtual machine contributors.

Enable Just Enough Administration (JEA).

Enable just-in-time (JIT) VM access.

Your company is designing an application architecture for Azure App Service Environment (ASE) web apps as shown in the exhibit. (Click the Exhibit tab.) Communication between the on-premises network and Azure uses an ExpressRoute connection.You need to recommend a solution to ensure that the web apps can communicate with the onpremises application server. The solution must minimize the number of public IP addresses that are allowed to access the on-premises network. What should you include in the recommendation?

Azure Front Door with Azure Web Application Firewall (WAF)

Azure Traffic Manager with priority traffic-routing methods

Azure Application Gateway v2 with user-defined routes (UDRs).

Azure Front Door with Azure Web Application Firewall (WAF)

Azure Firewall with policy rule sets

You have Windows 11 devices and Microsoft 365 E5 licenses.You need to recommend a solution to prevent users from accessing websites that contain adult content such as gambling sites. What should you include in the recommendation?

Microsoft Defender for Endpoint

Microsoft Defender for Cloud Apps

Microsoft Defender for Endpoint

You have an Azure subscription that has Microsoft Defender for Cloud enabled. You need to enforce ISO 2700V2013 standards for the subscription. The solution must ensure that noncompliant resources are remediated automatically. What should you use?

the regulatory compliance dashboard in Defender for Cloud

Azure role-based access control (Azure RBAC)

You receive a security alert in Microsoft Defender for Cloud as shown in the exhibit. (Click the Exhibit tab.) After remediating the threat which policy definition should you assign to prevent the threat from reoccurring?

Storage account public access should be disallowed

Azure Key Vault Managed HSM should have purge protection enabled

Storage accounts should prevent shared key access

Storage account keys should not be expired

Your company is preparing for cloud adoption.You are designing security for Azure landing zones.Which two preventative controls can you implement to increase the secure score? Each NOTE: Each correct selection is worth one point.

Azure Web Application Firewall (WAF)

Microsoft Defender for Cloud alerts

Azure Active Directory (Azure AD Privileged Identity Management (PIM)

You are designing security for an Azure landing zone. Your company identifies the following compliance and privacy requirements:• Encrypt cardholder data by using encryption keys managed by the company.• Encrypt insurance claim files by using encryption keys hosted on-premises.Which two configurations meet the compliance and privacy requirements? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

Store the insurance claim data in Azure Blob storage encrypted by using customer-provided keys.

Store the insurance claim data in Azure Files encrypted by using Azure Key Vault Managed HSM.

Store the insurance claim data in Azure Blob storage encrypted by using customer-provided keys.

Store the cardholder data in an Azure SQL database that is encrypted by using keys stored in Azure Key Vault Managed HSM

Store the insurance claim data in Azure Files encrypted by using Azure Key Vault Managed HSM.

Store the cardholder data in an Azure SQL database that is encrypted by using Microsoft-managed Keys.

You have 50 Azure subscriptions.You need to monitor resource in the subscriptions for compliance with the ISO 27001:2013 standards. The solution must minimize the effort required to modify the list of monitored policy definitions for the subscriptions. NOTE: Each correct selection is worth one point.

Assign an initiative to a management group.

Assign a blueprint to a management group.

Assign an initiative to a management group.

Assign a policy to each subscription.

Assign a policy to a management group.

Assign an initiative to each subscription.

Assign a blueprint to each subscription.

Assign a blueprint to a management group.

Your company has a Microsoft 365 E5 subscription. The company wants to identify and classify data in Microsoft Teams, SharePoint Online, and Exchange Online. You need to recommend a solution to identify documents that contain sensitive information. What should you include in the recommendation?

data classification content explorer

Your company is developing an invoicing application that will use Azure Active Directory (Azure AD) B2C. The application will be deployed as an App Service web app. You need to recommend a solution to the application development team to secure the application from identity related attacks. Which two configurations should you recommend? Each correct answer presents part of the solution. NOTE:Each correct selection is worth one point.

Azure AD Conditional Access integration with user flows and custom policies

custom resource owner password credentials (ROPC) flows in Azure AD B2C

Azure AD Conditional Access integration with user flows and custom policies

Azure AD workbooks to monitor risk detections

custom resource owner password credentials (ROPC) flows in Azure AD B2C

access packages in Identity Governance

smart account lockout in Azure AD B2C

Your company has a Microsoft 365 E5 subscription.Users use Microsoft Teams, Exchange Online, SharePoint Online, and OneDrive for sharing and collaborating. The company identifies protected health information (PHI) within stored documents and communications. What should you recommend using to prevent the PHI from being shared outside the company?

insider risk management policies

data loss prevention (DLP) policies

You are designing the security standards for containerized applications onboarded to Azure. You are evaluating the use of Microsoft Defender for Containers. In which two environments can you use Defender for Containers to scan for known vulnerabilities?Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

Linux containers deployed to Azure Container Registry

Windows containers deployed to Azure Container Registry

Linux containers deployed to Azure Container Registry

Linux containers deployed to Azure Kubernetes Service (AKS)

Windows containers deployed to Azure Container Registry

Windows containers deployed to Azure Kubernetes Service (AKS)

Linux containers deployed to Azure Container Instances

Your company has an on-premises network and an Azure subscription.The company does NOT have a Site-to-Site VPN or an ExpressRoute connection to Azure.You are designing the security standards for Azure App Service web apps. The web apps will access Microsoft SQL Server databases on the network. You need to recommend security standards that will allow the web apps to access the databases. The solution must minimize the number of open internet-accessible endpoints to the on-premises network. What should you include in the recommendation?

virtual network NAT gateway integration

Your company has a hybrid cloud infrastructure that contains an on-premises Active Directory Domain Services (AD DS) forest, a Microsoft B65 subscription, and an Azure subscription. The company's on-premises network contains internal web apps that use Kerberos authentication.Currently, the web apps are accessible only from the network.You have remote users who have personal devices that run Windows 11.You need to recommend a solution to provide the remote users with the ability to access the web apps. The solution must meet the following requirements:• Prevent the remote users from accessing any other resources on the network.• Support Azure Active Directory (Azure AD) Conditional Access.• Simplify the end-user experience.What should you include in the recommendation?

web content filtering in Microsoft Defender for Endpoint

Your company has a third-party security information and event management (SIEM) solution that uses Splunk and Microsoft Sentinel. You plan to integrate Microsoft Sentinel with Splunk. You need to recommend a solution to send security events from Microsoft Sentinel to Splunk. What should you include in the recommendation?

a Microsoft Sentinel data connector

Microsoft SC-100 Practice Test 1 - Free Online Exam Prep & Questions

Question 1 / 40

You need to recommend a solution to meet the security requirements for the InfraSec group. What should you use to delegate the access?

a subscription

a custom role-based access control (RBAC) role

a resource group

a management group

Show Case Study

Comment (0)

Microsoft SC-100 Practice Test 1

Question

Microsoft SC-100 Practice Tests

Practice Tests