SC-100 Practice Test

SC-100 Practice Test practice questions, page 10 of 15, with answer review and explanations.

Question 46

You have a Microsoft Entra tenant named contoso.com. You have 30 Azure subscriptions that are linked to contoso.com. The tenant contains the management groups shown in the following table. You need to design a governance solution to manage access to all the Azure Storage accounts across the subscriptions. The solution must meet the following requirements: • Use custom role-based access control (RBAC) to provide granular access to control plane and data plane operations. • Minimize administrative effort. At which scope should you assign the roles, and what is the minimum number of assignments per role? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 47

You have an Azure subscription that contains an Azure Kubernetes Service (AKS) cluster named AKS1. AKS1 hosts a Windows node pool named Pool1 and a Linux node pool named Pool2. You are designing a pool update strategy for AKS1. You need to recommend how often to replace the operating system images deployed to the nodes. The solution must meet the following requirements: • Minimize how long it takes to apply operating system updates once the updates are released. • Minimize administrative effort. What should you recommend for each pool? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 48

You have an Azure subscription that contains multiple apps. The apps are deployed by using continuous integration and continuous delivery (CI/CD) pipelines in Azure DevOps. You need to integrate static application security testing (SAST) and security smoke testing into the pipelines based on Microsoft Cloud Adoption Framework for Azure principles. At which stage of the CI/CID process should each type of test be integrated? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 49

You have an Azure subscription that contains Azure App Service apps. The apps have the following characteristics: • The apps are deployed by using continuous integration and continuous deployment (CI/CD) pipelines in Azure DevOps. • The apps are deployed to a test environment first, and then to a production environment. • The source code for the apps is stored in Azure Repos. You plan to implement DevSecOps controls based on the Microsoft Cloud Adoption Framework for Azure. You need to recommend testing controls to meet the following requirements: • All the source code must be tested for security vulnerabilities in Azure Repos before deploying the apps. • Once the apps are deployed to the test environment, they must be tested for security vulnerabilities. Which testing method should you recommend for each stage? To answer, select the options in the answer area. NOTE: Each correct answer is worth one point.

Question 50

You have an Azure DevOps organization that is used to manage the development and deployment of internal apps to multiple Azure subscriptions. You are developing a DevSecOps strategy. You need to apply DevSecOps controls for the secure code stage and the secure operations stage. The solution must be based on Microsoft Cloud Adoption Framework for Azure principles. What should you apply for each stage? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.