ExamGecko
Login
Home / Microsoft / SC-100 / List of questions
Ask Question

Microsoft SC-100 Practice Test - Questions Answers, Page 2

Add to Whishlist

List of questions

Question 11

Report Export Collapse

To meet the application security requirements, which two authentication methods must the applications support? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

Security Assertion Markup Language (SAML)

Security Assertion Markup Language (SAML)

NTLMv2

NTLMv2

certificate-based authentication

certificate-based authentication

Kerberos

Kerberos

Suggested answer: A, D
asked 05/10/2024
David Stutz
37 questions

Question 12

Report Export Collapse

You need to recommend a solution for securing the landing zones. The solution must meet the landing zone requirements and the business requirements. What should you configure for each landing zone?

Azure DDoS Protection Standard

Azure DDoS Protection Standard

an Azure Private DNS zone

an Azure Private DNS zone

Microsoft Defender for Cloud

Microsoft Defender for Cloud

an ExpressRoute gateway

an ExpressRoute gateway

Suggested answer: D
Explanation:

https://docs.microsoft.com/en-us/azure/active-directory/app-proxy/application-proxy-configure- single-sign-on-on-premises-apps https://docs.microsoft.com/en-us/azure/active-directory/app-proxy/application-proxy-configure- single-sign-on-with-kcd

https://docs.microsoft.com/en-us/azure/active-directory/app-proxy/application-proxy-configure- custom-domain

asked 05/10/2024
Abigail Bormann
50 questions

Question 13

Report Export Collapse

HOTSPOT

You need to recommend a strategy for securing the litware.com forest. The solution must meet the identity requirements. What should you include in the recommendation? To answer, select the appropriate options in the answer are a. NOTE; Each correct selection is worth one point.


Microsoft SC-100 image Question 13 107605 10052024010833000
Correct answer: Microsoft SC-100 image answer Question 13 107605 10052024010833000
Explanation:

1. Azure AD Identity Protection

Brute Force Detection: https://docs.microsoft.com/en-us/azure/active-directory/identity- protection/overview-identity-protection 2. Defender for Identity

MDI can detect brute force attacks: ref: https://docs.microsoft.com/en-us/defender-for- identity/compromised-credentials-alerts#suspected-brute-force-attack-ldap-external-id-2004

asked 05/10/2024
Joe Moore
46 questions

Question 14

Report Export Collapse

HOTSPOT

You need to recommend a multi-tenant and hybrid security solution that meets to the business requirements and the hybrid requirements. What should you recommend? To answer, select the appropriate options in the answer area. NOTE:

Each correct selection is worth one point.


Microsoft SC-100 image Question 14 107606 10052024010833000
Correct answer: Microsoft SC-100 image answer Question 14 107606 10052024010833000
asked 05/10/2024
james campbell
42 questions

Question 15

Report Export Collapse

HOTSPOT

You need to recommend a SIEM and SOAR strategy that meets the hybrid requirements, the Microsoft Sentinel requirements, and the regulatory compliance requirements. What should you recommend? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.


Microsoft SC-100 image Question 15 107607 10052024010833000
Correct answer: Microsoft SC-100 image answer Question 15 107607 10052024010833000
asked 05/10/2024
gregory koontz
45 questions

Question 16

Report Export Collapse

HOTSPOT

You need to recommend an identity security solution for the Azure AD tenant of Litware. The solution must meet the identity requirements and the regulatory compliance requirements. What should you recommend? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.


Microsoft SC-100 image Question 16 107608 10052024010833000
Correct answer: Microsoft SC-100 image answer Question 16 107608 10052024010833000
asked 05/10/2024
Angel Molina
48 questions

Question 17

Report Export Collapse

HOTSPOT

You need to recommend a strategy for App Service web app connectivity. The solution must meet the landing zone requirements. What should you recommend? To answer, select the appropriate options in the answer area. NOTE Each correct selection is worth one point.


Microsoft SC-100 image Question 17 107609 10052024010833000
Correct answer: Microsoft SC-100 image answer Question 17 107609 10052024010833000
Explanation:

Box 1: Virtual Network Integration - correct Virtual network integration gives your app access to resources in your virtual network, but it doesn't grant inbound private access to your app from the virtual network. Box 2: Private Endpoints. - correct You can use Private Endpoint for your Azure Web App to allow clients located in your private network to securely access the app over Private Link.

asked 05/10/2024
CARL COUCH
47 questions

Question 18

Report Export Collapse

HOTSPOT

You need to recommend a solution to evaluate regulatory compliance across the entire managed environment. The solution must meet the regulatory compliance requirements and the business requirements. What should you recommend? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.


Microsoft SC-100 image Question 18 107610 10052024010833000
Correct answer: Microsoft SC-100 image answer Question 18 107610 10052024010833000
asked 05/10/2024
Dasaret Tillman
43 questions

Question 19

Report Export Collapse

You need to design a strategy for securing the SharePoint Online and Exchange Online dat a. The solution must meet the application security requirements. Which two services should you leverage in the strategy? Each correct answer presents part of the solution. NOTE; Each correct selection is worth one point.

Azure AD Conditional Access

Azure AD Conditional Access

Microsoft Defender for Cloud Apps

Microsoft Defender for Cloud Apps

Microsoft Defender for Cloud

Microsoft Defender for Cloud

Microsoft Defender for Endpoint

Microsoft Defender for Endpoint

access reviews in Azure AD

access reviews in Azure AD

Suggested answer: A, B
Explanation:

https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/concept-conditional- access-session#conditional-access-application-control

https://docs.microsoft.com/en-us/azure/active-directory/app-proxy/application-proxy-integrate- with-microsoft-cloud-application-security

asked 05/10/2024
Jay Chua
48 questions

Question 20

Report Export Collapse

Your company has on-premises Microsoft SQL Server databases.

The company plans to move the databases to Azure.

You need to recommend a secure architecture for the databases that will minimize operational requirements for patching and protect sensitive data by using dynamic data masking. The solution must minimize costs. What should you include in the recommendation?

Azure SQL Managed Instance

Azure SQL Managed Instance

Azure Synapse Analytics dedicated SQL pools

Azure Synapse Analytics dedicated SQL pools

Azure SQL Database

Azure SQL Database

SQL Server on Azure Virtual Machines

SQL Server on Azure Virtual Machines

Suggested answer: C
asked 05/10/2024
sarath raj
50 questions
Total 200 questions
Go to page: of 20
Search
Open VPLUS File
Convert VPLUS to PDF

Related questions

You have legacy operational technology (OT) devices and loT devices. You need to recommend best practices for applying Zero Trust principles to the OT and loT devices based on the Microsoft Cybersecurity Reference Architectures (MCRA). The solution must minimize the risk of disrupting business operations. Which two security methodologies should you include in the recommendation? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point
You have a Microsoft 365 subscription and an Azure subscription. Microsoft 365 Defender and Microsoft Defender for Cloud are enabled. The Azure subscription contains 50 virtual machines. Each virtual machine runs different applications on Windows Server 2019. You need to recommend a solution to ensure that only authorized applications can run on the virtual machines. If an unauthorized application attempts to run or be installed, the application must be blocked automatically until an administrator authorizes the application. Which security control should you recommend?
You are designing a security strategy for providing access to Azure App Service web apps through an Azure Front Door instance. You need to recommend a solution to ensure that the web apps only allow access through the Front Door instance. Solution: You recommend access restrictions based on HTTP headers that have the Front Door ID. Does this meet the goal?
Your company is developing a serverless application in Azure that will have the architecture shown in the following exhibit. You need to recommend a solution to isolate the compute components on an Azure virtual network. What should you include in the recommendation?
HOTSPOT Your network contains an on-premises Active Directory Domain Services (AO DS) domain. The domain contains a server that runs Windows Server and hosts shared folders The domain syncs with Azure AD by using Azure AD Connect Azure AD Connect has group writeback enabled. You have a Microsoft 365 subscription that uses Microsoft SharePoint Online. You have multiple project teams. Each team has an AD DS group that syncs with Azure AD Each group has permissions to a unique SharePoint Online site and a Windows Server shared folder for its project. Users routinely move between project teams. You need to recommend an Azure AD identity Governance solution that meets the following requirements: * Project managers must verify that their project group contains only the current members of their project team * The members of each project team must only have access to the resources of the project to which they are assigned * Users must be removed from a project group automatically if the project manager has MOT verified the group s membership for 30 days. * Administrative effort must be minimized. What should you include in the recommendation? To answer select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.
You have a Microsoft 365 E5 subscription. You are designing a solution to protect confidential data in Microsoft SharePoint Online sites that contain more than one million documents. You need to recommend a solution to prevent Personally Identifiable Information (Pll) from being shared. Which two components should you include in the recommendation? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.
You have an Azure subscription that has Microsoft Defender for Cloud enabled. Suspicious authentication activity alerts have been appearing in the Workload protections dashboard. You need to recommend a solution to evaluate and remediate the alerts by using workflow automation. The solution must minimize development effort. What should you include in the recommendation?
You plan to deploy 20 Azure Kubernetes Service (AKS) clusters. The cluster configuration will be managed declaratively by using Kubernetes manifest files stored in Azure Repos. You need to recommend a solution to ensure that the configuration of all the clusters remains consistent by using the manifest files stored in Azure Repos. What should you include in the recommendation?
You have an Azure subscription that has Microsoft Defender for Cloud enabled. You need to enforce ISO 27001:2013 standards for new resources deployed to the subscription. The solution must ensure that noncompliant resources are automatically detected. What should you use?
You have an on-premises server that runs Windows Server and contains a Microsoft SQL Server database named DB1. You plan to migrate DB1 to Azure. You need to recommend an encrypted Azure database solution that meets the following requirements: * Minimizes the risks of malware that uses elevated privileges to access sensitive data * Prevents database administrators from accessing sensitive data * Enables pattern matching for server-side database operations * Supports Microsoft Azure Attestation * Uses hardware-based encryption What should you include in the recommendation?