ExamGecko
Search Search Login
Home Home / Microsoft / SC-100
Ask QuestionAsk Question

Microsoft SC-100 Practice Test - Questions Answers

Question list
Search
Search

List of questions

Search
Open VPLUS File
Convert VPLUS to PDF

Related questions

You have legacy operational technology (OT) devices and loT devices. You need to recommend best practices for applying Zero Trust principles to the OT and loT devices based on the Microsoft Cybersecurity Reference Architectures (MCRA). The solution must minimize the risk of disrupting business operations. Which two security methodologies should you include in the recommendation? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point
You have a Microsoft 365 subscription and an Azure subscription. Microsoft 365 Defender and Microsoft Defender for Cloud are enabled. The Azure subscription contains 50 virtual machines. Each virtual machine runs different applications on Windows Server 2019. You need to recommend a solution to ensure that only authorized applications can run on the virtual machines. If an unauthorized application attempts to run or be installed, the application must be blocked automatically until an administrator authorizes the application. Which security control should you recommend?
You are designing a security strategy for providing access to Azure App Service web apps through an Azure Front Door instance. You need to recommend a solution to ensure that the web apps only allow access through the Front Door instance. Solution: You recommend access restrictions based on HTTP headers that have the Front Door ID. Does this meet the goal?
Your company is developing a serverless application in Azure that will have the architecture shown in the following exhibit. You need to recommend a solution to isolate the compute components on an Azure virtual network. What should you include in the recommendation?
HOTSPOT Your network contains an on-premises Active Directory Domain Services (AO DS) domain. The domain contains a server that runs Windows Server and hosts shared folders The domain syncs with Azure AD by using Azure AD Connect Azure AD Connect has group writeback enabled. You have a Microsoft 365 subscription that uses Microsoft SharePoint Online. You have multiple project teams. Each team has an AD DS group that syncs with Azure AD Each group has permissions to a unique SharePoint Online site and a Windows Server shared folder for its project. Users routinely move between project teams. You need to recommend an Azure AD identity Governance solution that meets the following requirements: * Project managers must verify that their project group contains only the current members of their project team * The members of each project team must only have access to the resources of the project to which they are assigned * Users must be removed from a project group automatically if the project manager has MOT verified the group s membership for 30 days. * Administrative effort must be minimized. What should you include in the recommendation? To answer select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.
You have a Microsoft 365 E5 subscription. You are designing a solution to protect confidential data in Microsoft SharePoint Online sites that contain more than one million documents. You need to recommend a solution to prevent Personally Identifiable Information (Pll) from being shared. Which two components should you include in the recommendation? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.
You have an Azure subscription that has Microsoft Defender for Cloud enabled. Suspicious authentication activity alerts have been appearing in the Workload protections dashboard. You need to recommend a solution to evaluate and remediate the alerts by using workflow automation. The solution must minimize development effort. What should you include in the recommendation?
You plan to deploy 20 Azure Kubernetes Service (AKS) clusters. The cluster configuration will be managed declaratively by using Kubernetes manifest files stored in Azure Repos. You need to recommend a solution to ensure that the configuration of all the clusters remains consistent by using the manifest files stored in Azure Repos. What should you include in the recommendation?
You have an Azure subscription that has Microsoft Defender for Cloud enabled. You need to enforce ISO 27001:2013 standards for new resources deployed to the subscription. The solution must ensure that noncompliant resources are automatically detected. What should you use?
You have an on-premises server that runs Windows Server and contains a Microsoft SQL Server database named DB1. You plan to migrate DB1 to Azure. You need to recommend an encrypted Azure database solution that meets the following requirements: * Minimizes the risks of malware that uses elevated privileges to access sensitive data * Prevents database administrators from accessing sensitive data * Enables pattern matching for server-side database operations * Supports Microsoft Azure Attestation * Uses hardware-based encryption What should you include in the recommendation?

Question 1

Report
Export
Collapse

You need to recommend a solution to meet the security requirements for the InfraSec group. What should you use to delegate the access?

A.

a subscription

A.

a subscription
Answers
B.

a custom role-based access control (RBAC) role

B.

a custom role-based access control (RBAC) role
Answers
C.

a resource group

C.

a resource group
Answers
D.

a management group

D.

a management group
Answers
Suggested answer: B
asked 05/10/2024
TANVIR ANJUM
37 questions

Question 2

Report
Export
Collapse

You need to recommend a solution to scan the application code. The solution must meet the application development requirements. What should you include in the recommendation?

A.

Azure Key Vault

A.

Azure Key Vault
Answers
B.

GitHub Advanced Security

B.

GitHub Advanced Security
Answers
C.

Application Insights in Azure Monitor

C.

Application Insights in Azure Monitor
Answers
D.

Azure DevTest Labs

D.

Azure DevTest Labs
Answers
Suggested answer: B

Explanation:

https://docs.microsoft.com/en-us/learn/modules/introduction-github-advanced-security/2-what-is- github-advanced-security

asked 05/10/2024
Michele Lorengo
38 questions

Question 3

Report
Export
Collapse

You need to recommend a solution to resolve the virtual machine issue. What should you include in the recommendation? (Choose Two)

A.

Onboard the virtual machines to Microsoft Defender for Endpoint.

A.

Onboard the virtual machines to Microsoft Defender for Endpoint.
Answers
B.

Onboard the virtual machines to Azure Arc.

B.

Onboard the virtual machines to Azure Arc.
Answers
C.

Create a device compliance policy in Microsoft Endpoint Manager.

C.

Create a device compliance policy in Microsoft Endpoint Manager.
Answers
D.

Enable the Qualys scanner in Defender for Cloud.

D.

Enable the Qualys scanner in Defender for Cloud.
Answers
Suggested answer: A, D

Explanation:

https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/switch-to-mde-phase- 3?view=o365-worldwide

asked 05/10/2024
Alper Atar
32 questions

Question 4

Report
Export
Collapse

You need to recommend a solution to secure the MedicalHistory data in the ClaimsDetail table. The solution must meet the Contoso developer requirements. What should you include in the recommendation?

A.

Transparent Data Encryption (TDE)

A.

Transparent Data Encryption (TDE)
Answers
B.

Always Encrypted

B.

Always Encrypted
Answers
C.

row-level security (RLS)

C.

row-level security (RLS)
Answers
D.

dynamic data masking

D.

dynamic data masking
Answers
E.

data classification

E.

data classification
Answers
Suggested answer: D

Explanation:


asked 05/10/2024
Eric Tegels
44 questions

Question 5

Report
Export
Collapse

You need to recommend a solution to meet the security requirements for the virtual machines. What should you include in the recommendation?

A.

an Azure Bastion host

A.

an Azure Bastion host
Answers
B.

a network security group (NSG)

B.

a network security group (NSG)
Answers
C.

just-in-time (JIT) VM access

C.

just-in-time (JIT) VM access
Answers
D.

Azure Virtual Desktop

D.

Azure Virtual Desktop
Answers
Suggested answer: A

Explanation:

The security requirement this question wants us to meet is "The secure host must be provisionedfrom a custom operating system image." https://docs.microsoft.com/en-us/azure/virtual- desktop/set-up-golden-image

asked 05/10/2024
Ihab ALkasrawi
34 questions

Question 6

Report
Export
Collapse

HOTSPOT

What should you create in Azure AD to meet the Contoso developer requirements?


Question 6
Correct answer: Question 6
asked 05/10/2024
Nickolas Abbas
51 questions

Question 7

Report
Export
Collapse

HOTSPOT

You are evaluating the security of ClaimsApp.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE; Each correct selection is worth one point.


Question 7
Correct answer: Question 7
asked 05/10/2024
eswar raj
33 questions

Question 8

Report
Export
Collapse

HOTSPOT

You need to recommend a solution to meet the AWS requirements.

What should you include in the recommendation? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.


Question 8
Correct answer: Question 8
asked 05/10/2024
Sergio Escobar
34 questions

Question 9

Report
Export
Collapse

HOTSPOT

You need to recommend a solution to meet the requirements for connections to ClaimsDB.

What should you recommend using for each requirement? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.


Question 9
Correct answer: Question 9
asked 05/10/2024
Rodrigo Valencia
42 questions

Question 10

Report
Export
Collapse

HOTSPOT

You need to recommend a solution to meet the compliance requirements.

What should you recommend? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.


Question 10
Correct answer: Question 10

Explanation:

Box 1 = A Blueprint

Box 2 = Update an Azure Policy assignment

https://learn.microsoft.com/en-us/azure/governance/policy/tutorials/create-and-manage#update- assignment-with-exclusion https://docs.microsoft.com/en-us/azure/governance/policy/concepts/definition-structurewhile it is in policy assignment-https://docs.microsoft.com/en-us/azure/governance/policy/concepts/assignment-structure

asked 05/10/2024
Olga Trofimova
34 questions
Total 177 questions
Go to page: of 18
ExamGecko

Copyright @2023 ExamGecko | All right reserved

Mail us: [email protected]
About us
Contact us
Convert VPLUS to PDF
Open VPLUS files Easily and Quickly
Privacy policy
Terms
Disclaimer
Refund policy
Copyright
Twitter X
Facebook
Medium