SC-100 practice questions 91–100

1. Question 91 · 277 in bank

   You have an Azure subscription named Sub1 that is linked to a Microsoft Entra tenant named contoso.com. Sub1 contains 20 virtual networks named Sub1_VNet1 through Sub1_VNet20. You have an Azure subscription named Sub2 that is linked to a Microsoft Entra tenant named fabrikam.com. Sub2 contains 20 virtual networks named Sub2_VNet1 through Sub2_VNet20. You need to deploy an Azure Virtual Network Manager solution that meets the following requirements: • Blocks SSH traffic on Sub1_VNet20 and Sub2_VNet20 by using network security groups (NSGs) • Blocks SSH traffic on Sub1_VNet1 through Sub1_VNet19 and Sub2_VNet1 through Sub2_VNet19 • Allows SSH traffic on Sub1_VNet20 and Sub2_VNet20 • Blocks FTP traffic on all the virtual networks • Minimizes administrative effort What is minimum number of components required for the deployment?

   • A• 1 Virtual Network Manager instance • 1 rule collection • 2 NSGs
   • B• 2 Virtual Network Manager instances that each contains: o 1 NSG o 1 rule collection
   • C• 2 Virtual Network Manager instances that each contains: o 2 NSGs o 2 rule collections
   • D• 1 Virtual Network Manager instance • 2 rule collections • 2 NSGs

   Show answer

   Answer: D

   Next question

2. Question 92 · 277 in bank

   You have an Azure subscription that is used as an Azure landing zone for an application. You need to evaluate the security posture of all the workloads in the landing zone. What should you do first?

   • AConfigure Continuous Integration/Continuous Deployment (CI/CD) vulnerability scanning.
   • BObtain Azure AD Premium Plan 2 licenses.
   • CAdd Microsoft Sentinel data connectors.
   • DEnable the Defender plan for all resource types in Microsoft Defender for Cloud.

   Show answer

   Answer: D

   Explanation

   D is the answer. https://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-for-cloud-introduction#improve-your-security-posture The security of your cloud and on-premises resources depends on proper configuration and deployment. Defender for Cloud recommendations identify the steps that you can take to secure your environment. Defender for Cloud includes Foundational CSPM capabilities for free. You can also enable advanced CSPM capabilities by enabling paid Defender plans.

   Source: Adapted from community discussion — zellck

   References

   • Microsoft Learn
   • Microsoft Learn

   Next question

3. Question 93 · 277 in bank

   You have a Microsoft 365 subscription. You have an Azure subscription. You need to implement a Microsoft Purview communication compliance solution for Microsoft Teams and Yammer. The solution must meet the following requirements: • Assign compliance policies to Microsoft 365 groups based on custom Microsoft Exchange Online attributes. • Minimize the number of compliance policies. • Minimize administrative effort. What should you include in the solution?

   • Aadaptive scopes
   • BMicrosoft 365 Defender user tags
   • Cadministrative units
   • DMicrosoft Purview sensitivity labels

   Show answer

   Answer: A

   Next question

4. Question 94 · 277 in bank

   Select 2

   You have an Azure subscription. You have a subscription to a third-party cloud provider. The subscription contains 100 virtual machines. You manage cloud security for both subscriptions from the Azure subscription. You need to recommend a solution to validate the security posture of the virtual machines. Which two services should you include in the recommendation? Each correct answer presents part of the solution. NOTE: Each correct answer is worth one point.

   • AMicrosoft Sentinel
   • BAzure Arc
   • CMicrosoft Defender for Cloud
   • DAzure Lighthouse
   • EMicrosoft Defender for Endpoint

   Show answer

   Answer: BC

   Next question

5. Question 95 · 277 in bank

   HOTSPOT - You have a Microsoft 365 E5 subscription and an Azure subscription. You need to evaluate the existing environment to increase the overall security posture for the following components: ✑ Windows 11 devices managed by Microsoft Intune ✑ Azure Storage accounts ✑ Azure virtual machines What should you use to evaluate the components? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Selection 1: Microsoft 365 Defender (Microsoft Defender for Endpoint is part of it). Selection 2: Microsoft Defender for Cloud. Selection 3: Microsoft Defender for Cloud.

   Source: Adapted from community discussion — HardcodedCloud

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   

   Next question

6. Question 96 · 277 in bank

   You have an Azure subscription that uses Microsoft Defender for Cloud. You have Amazon Web Services (AWS), Google Cloud Platform (GCP), and Oracle Cloud Infrastructure (OCI) subscriptions. You create a custom security standard in Defender for Cloud. To which subscriptions can the Defender for Cloud standard be applied?

   • AAzure and AWS only
   • BAzure and GCP only
   • CAzure, AWS, and GCP only
   • DAzure, AWS, and OCI only
   • EAzure, AWS, GCP, and OCI

   Show answer

   Answer: C

   Next question

7. Question 97 · 277 in bank

   You have an Azure subscription that contains a web app named App1. App1 uses a Microsoft Entra user account named SRV1 as a service account to authenticate to an Azure SQL database named DB1. You discover that a developer accessed DB1 directly by using SRV1. You need to recommend a secure authentication method that will prevent credential misuse outside of App1. The solution must minimize administrative effort. What should you recommend?

   • Aa managed identity
   • Ba group managed service account (gMSA)
   • Ca delegated managed service account (dMSA)
   • Da federated identity credential

   Show answer

   Answer: A

   Next question

8. Question 98 · 277 in bank

   You have a Microsoft 365 subscription that uses Microsoft Defender XDR and Microsoft Purview. On a Microsoft SharePoint Online site, you have a file named File1 that has a sensitivity label applied. You need to recommend a solution that will reevaluate Conditional Access policies when a user downloads Filel from the SharePoint site. What should you include in the recommendation?

   • AMicrosoft Defender for Cloud Apps
   • BMicrosoft Defender for Cloud
   • CMicrosoft Defender for Office 365
   • DMicrosoft Entra application proxy

   Show answer

   Answer: A

   Next question

9. Question 99 · 277 in bank

   Your company has an Azure subscription that uses Microsoft Defender for Cloud. The company signs a contract with the United States government. You need to review the current subscription for NIST 800-53 compliance. What should you do first?

   • AFrom Defender for Cloud, review the Azure security baseline for audit report.
   • BFrom Microsoft Defender for Cloud Apps, create an access policy for cloud applications.
   • CFrom Defender for Cloud, enable Defender for Cloud plans.
   • DFrom Azure Policy, assign a built-in initiative that has a scope of the subscription.

   Show answer

   Answer: D

   References

   • Microsoft Learn

   Next question

10. Question 100 · 277 in bank

    You have a Microsoft 365 subscription. You have a Conditional Access policy that has the following settings: • Name: Policy 1 • Assignments o Users: - Include: All users o Target resources - Include: Select apps; Office 365 o Network - Include: Any network or location - Exclude: Selected networks and locations; Site1 o Access controls - Grant: Require multifactor authentication, Require Hybrid Microsoft Entra joined device You plan to implement Zero Trust Rapid Modernization Plan (RaMP). You need to ensure that Policy1 aligns with best practice recommendations in RaMP. Which setting should you change?

    • AInclude: Any network or location
    • BExclude: Selected networks and locations; Site1
    • CGrant Require Hybrid Microsoft Entra joined device
    • DGrant: Require multifactor authentication

    Show answer

    Answer: B

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

SC-100 practice, question 91. 277 questions available.