SC-100 practice questions 131–140

1. Question 131 · 277 in bank

   Your on-premises network contains an Active Directory Domain Services (AD DS) domain. The domain contains 500 Windows 11 devices. You have a Microsoft 365 subscription and an Azure subscription. You have a Microsoft Entra tenant that syncs with the domain and is linked to the subscriptions. The devices are Microsoft Entra hybrid joined. You plan to deploy a solution to mitigate attacks against privileged accounts. The solution will include Microsoft Sentinel rules that will detect attempts to use fake cached credentials. You need to recommend a solution to create the fake cached credentials on client computers. What should you recommend?

   • AUser and Entity Behavior Analytics (UEBA) in Microsoft Sentinel
   • Ba deception rule in Microsoft Defender for Endpoint
   • Ca user risk policy in Microsoft Entra ID Protection
   • Da Honeytoken tag in Microsoft Defender for Identity

   Show answer

   Answer: D

   Next question

2. Question 132 · 277 in bank

   HOTSPOT - You have multiple on-premises Hyper-V hosts that contain virtual machines. The virtual machines run Windows Server 2022. You have an Azure subscription. You need to recommend a solution to collect Security event logs from the virtual machines by using Microsoft Sentinel. The Solution must meet the following requirements: • Leverage the Windows Security Events via AMA data connector. • Ensure that only specific events are collected. • Minimize costs. What should you recommend? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one port.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   References

   • Microsoft Learn

   

   Next question

3. Question 133 · 277 in bank

   Select 2

   You have an Azure subscription and a Microsoft 365 subscription. All users are assigned Microsoft 365 E5 licenses. All computers run Windows 11 and are Microsoft Entra joined. You need to recommend a solution to prevent computers that run early builds of Windows 11 from connecting to Microsoft 365 services. Which two types of policies should you include in the recommendation? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

   • AMicrosoft Defender for Endpoint endpoint security policy
   • BMicrosoft Defender for Cloud regulatory compliance policy
   • CMicrosoft Intune compliance policy
   • DMicrosoft Entra ID Protection sign-in risk policy
   • EMicrosoft Entra Conditional Access policy

   Show answer

   Answer: CE

   Next question

4. Question 134 · 277 in bank

   HOTSPOT - You have an Azure subscription that contains 100 virtual machines. The virtual machines are accessed by using Azure Bastion. You need to recommend a solution to ensure that only specific users in specific locations can access the virtual machines. The solution must meet the following requirements: • Restrict access to the virtual machines based on an originating IP address or a connection request by using just-in-time (JIT) VM access network-based controls. • Restrict access to the virtual machines based on role-based access control (RBAC) role assignments by using JIT VM access authorization controls. Which Microsoft cloud services should you include in the recommendation? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   

   Next question

5. Question 135 · 277 in bank

   HOTSPOT - You have the Azure subscriptions shown in the following table.

   

   The tenants contain the groups shown in the following table.

   

   You perform the flowing actions: • Configure multi-user authorization (MUA) for Vault1 by using a resource guard deployed to Sub2. • Enable all available MUA controls for Vault1. • In contoso.com, create a Privileged Identity Management (PIM) assignment named Assignment1. • Configure Assignment1 to enable Group1 to activate the Contributor role for Vault1. For each of the following statements, select Yes if the statements is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   

   Next question

6. Question 136 · 277 in bank

   HOTSPOT - You have an Azure subscription that contains a virtual network named VNet1. VNet1 contains a 10-node virtual machine scale set that hosts a web search app named App1. Customers access App1 from the internet. The nodes establish outbound HTTP and HTTPS connections to the internet. You need to recommend a network security solution for App1. The solution must meet the following requirements: • Inbound connections to App1 that contain security threats specified in the Core Rule Set (CRS) from the Open Web Application Security Project (OWASP) must be blocked. • Outbound HTTP and HTTPS connections from the virtual machine scale set that contain security threats identified by the Microsoft Defender Threat Intelligence (Defender TI) feed must be blocked. What should you include in the recommendation? To answer, select the options in the answer area. NOTE: Each correct answer is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   References

   • Microsoft Learn
   • Microsoft Learn

   

   Next question

7. Question 137 · 277 in bank

   You have a Microsoft Entra tenant named contoso.com. You have an external partner that has a Microsoft Entra tenant named fabnkam.com. You need to recommend an identity governance solution for contoso.com that meets the following requirements: • Enables the users in contoso.com and fabrikam.com to communicate by using shared Microsoft Teams channels • Manages access to shared Teams channels in contoso.com by using groups in fabrikam.com • Supports single sign-on (SSO) • Minimizes administrative effort • Maximizes security What should you include in the recommendation?

   • ACross-tenant synchronization
   • BMicrosoft Entra B2B collaboration
   • CB2B direct connect
   • DMicrosoft Entra Connect Sync

   Show answer

   Answer: C

   References

   • Microsoft Learn

   Next question

8. Question 138 · 277 in bank

   You have a multicloud environment that contains Azure, Amazon Web Services (AWS), and Google Cloud Platform (GCP) subscriptions. You need to discover and review role assignments across the subscriptions. What should you use?

   • AAzure Lighthouse
   • BMicrosoft Defender for Identity
   • CMicrosoft Entra ID Governance
   • DMicrosoft Entra Permissions Management

   Show answer

   Answer: D

   Explanation

   Microsoft Entra Permissions Management is designed to provide visibility and management of permissions across multiple cloud platforms, including Azure, AWS, and GCP.

   Source: Adapted from community discussion — Ali96

   References

   • Microsoft Learn

   Next question

9. Question 139 · 277 in bank

   HOTSPOT - You have an Azure subscription that contains a Microsoft Sentinel workspace named WS1. You need to configure WS1 to meet the following requirements: • Create custom dashboards to visualize the workload of security analysts that use Microsoft Sentinel. • Enable automated responses for the security alerts generated by Microsoft Sentinel analytics rules. What should you use for each requirement? To answer, select the options in the answer area. NOTE: Each correct answer is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   References

   • Microsoft Learn
   • Microsoft Learn

   

   Next question

10. Question 140 · 277 in bank

    You have multiple Azure subscriptions that each contains multiple resource groups. You need to identify the privileged role assignments in each subscription and any associated security risks. The solution must minimize administrative effort. What should you use?

    • Aaccess reviews in Privileged Identity Management (PIM)
    • Baccess reviews in Microsoft Entra ID Identity Governance
    • CMicrosoft Defender External Attack Surface Management (Defender EASM) discovery
    • Dthe Analytics dashboard in Microsoft Entra Permissions Management

    Show answer

    Answer: D

    References

    • Microsoft Learn

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

SC-100 practice, question 131. 277 questions available.