SC-100 practice questions 121–130

1. Question 121 · 277 in bank

   HOTSPOT - You are designing a privileged access strategy for a company named Contoso, Ltd. and its partner company named Fabrikam, Inc. Contoso has an Azure AD tenant named contoso.com. Fabrikam has an Azure AD tenant named fabrikam.com. Users at Fabrikam must access the resources in contoso.com. You need to provide the Fabrikam users with access to the Contoso resources by using access packages. The solution must meet the following requirements: • Ensure that the Fabrikam users can use the Contoso access packages without explicitly creating guest accounts in contoso.com. • Allow non-administrative users in contoso.com to create the access packages. What should you use for each requirement? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   

   Next question

2. Question 122 · 277 in bank

   You have an Azure subscription that contains 15 custom apps. The source files for the apps are stored in Git repositories. The apps are deployed by using Azure DevOps. You need to recommend a DevSecOps solution to implement static application security testing (SAST) of the app code to identify hard-coded secrets. What should you include in the recommendation?

   • AGitHub Advanced Security
   • BMicrosoft Defender for Key Vault
   • CMicrosoft Dev Box
   • DMicrosoft Defender for Cloud DevOps security

   Show answer

   Answer: A

   Next question

3. Question 123 · 277 in bank

   You have a Microsoft Entra tenant. The tenant contains 500 Windows devices that have the Global Secure Access client deployed. You have a third-party software as a service (SaaS) app named App1. You plan to implement Global Secure Access to manage access to App1. You need to recommend a solution to manage connections to App1. The solution must ensure that users authenticate by using their Microsoft Entra credentials before they can connect to App1. What should you include the recommendation?

   • Aa Global Secure Access app
   • Ba private access traffic forwarding profile
   • Can internet access traffic forwarding profile
   • Da Quick Access app

   Show answer

   Answer: A

   Explanation

   A Global Secure Access app allows you to manage access to third-party SaaS apps, like App1, by integrating with Microsoft Entra for authentication. This solution ensures that users must authenticate with their Microsoft Entra credentials before they can access App1, providing a secure and managed access solution.

   Source: Adapted from community discussion — AlbertE1nstein

   Next question

4. Question 124 · 277 in bank

   You have an on-premises server named Server1. Server1 is an FTP server that can be accessed by only the users at your company. You have an Azure subscription. You need to recommend a Zero Trust Network Access (ZTNA) solution to enforce Conditional Access policies when users access Server1 from the internet. What should you include in the recommendation?

   • AMicrosoft Entra application proxy
   • BMicrosoft Entra Internet Access
   • CMicrosoft Entra Private Access
   • DAzure Application Gateway
   • EAzure Bastion

   Show answer

   Answer: C

   Next question

5. Question 125 · 277 in bank

   Your network contains an on-premises Active Directory Domain Services (AD DS) domain named Domain1. Domain1 contains 10 domain controllers. You have an Azure subscription named Sub1 that contains a Microsoft Sentinel workspace named WS1. You have a Microsoft 365 subscription that contains 5,000 users. Each user is assigned a Microsoft 365 E3 license. You need to recommend a solution to ingest security logs from all the domain controllers into WS1. The solution must meet the following requirements: • The cost of ingesting data into WS1 must be minimized. • WS1 must ingest all the Windows Security event logs generated by the domain controllers. • The solution must support the generation of approximately 350 MB of logs per day from each domain controller. What should you recommend?

   • AUpgrade the user licenses to Microsoft 365 E5.
   • BOnboard each domain controller to Microsoft Defender for Servers Plan 2.
   • CConfigure Auxiliary logs in WS1.
   • DConfigure a volume cap for WS1.
   • EOnly ingest data from one domain controller into WS1.

   Show answer

   Answer: B

   Next question

6. Question 126 · 277 in bank

   HOTSPOT - You have an Azure subscription that contains a Microsoft Sentinel workspace named MSW1. MSW11 includes 50 scheduled analytics rules. You need to design a security orchestration automated response (SOAR) solution by using Microsoft Sentinel playbooks. The solution must meet the following requirements: • Ensure that expiration dates can be configured when a playbook runs. • Minimize the administrative effort required to configure individual analytics rules. What should you use to invoke the playbooks, and which type of Microsoft Sentinel trigger should you use? To answer, select the options in the answer area. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   References

   • Microsoft Learn

   

   Next question

7. Question 127 · 277 in bank

   Select 3

   You have an Azure subscription that has Microsoft Defender for Cloud enabled. You have an Amazon Web Services (AWS) implementation. You plan to extend the Azure security strategy to the AWS implementation. The solution will NOT use Azure Arc. Which three services can you use to provide security for the AWS resources? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

   • AMicrosoft Defender for Containers
   • BMicrosoft Defender for servers
   • CAzure Active Directory (Azure AD) Conditional Access
   • DAzure Active Directory (Azure AD) Privileged Identity Management (PIM)
   • EAzure Policy

   Show answer

   Answer: ACD

   Explanation

   E can not be an answer, because in-order to apply Azure Policy on AWS based resources, you must need to use Azure Arc, which can not be the case based on requirements. So, ACD can be the possible answers.

   Source: Adapted from community discussion — Jajee

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   Next question

8. Question 128 · 277 in bank

   HOTSPOT - You have three Microsoft Entra tenants named Tenant1, Tenant2, and Tenant3. You have three Azure subscriptions named Sub1, Sub2, and Sub3. Each tenant is associated with multiple Azure subscriptions. Each subscription contains a single Microsoft Sentinel workspace as shown in the following table.

   

   You need to recommend a solution that meets the following requirements: • Ensures that the users in Tenant1 can manage the resources in Sub2 and Sub3 without having to switch subscriptions or sign in to a different tenant. • Implements multiple workspace view for Sentinel2 and Sentinel3. What should you use to delegate permissions, and which Microsoft Sentinel feature will users be able to manage in multiple workspace view? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   References

   • Microsoft Learn
   • Microsoft Learn

   

   Next question

9. Question 129 · 277 in bank

   You have a Microsoft 365 subscription that uses Microsoft Purview. You need to recommend a solution that will provide guidance on how to ensure that Personally Identifiable Information (PII) in the subscription adheres to local privacy regulations. The solution must minimize administrative effort. Which Microsoft Purview solution should you include in the recommendation?

   • AData Loss Prevention
   • BInformation Protection
   • CInsider Risk Management
   • DCompliance Manager

   Show answer

   Answer: D

   Next question

10. Question 130 · 277 in bank

    HOTSPOT - Your company, named Contoso, Ltd., has a Microsoft Entra tenant named contoso.com. Contoso has a partner company named Fabrikam, Inc. that has a Microsoft Entra tenant named fabrikam.com. You need to ensure that helpdesk users at Fabrikam can reset passwords for specific users at Contoso. The solution must meet the following requirements: • Follow the principle of least privilege. • Minimize administrative effort. What should you do? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

    

    This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

    Show the answer figure

    Answer: See figure below

    References

    • Microsoft Learn
    • Microsoft Learn

    

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

SC-100 practice, question 121. 277 questions available.