SC-100 Practice Test

SC-100 Practice Test practice questions, page 11 of 15, with answer review and explanations.

Question 51

You have an Azure environment that contains multiple workloads deployed across multiple subscriptions. You need to recommend a solution to assess and improve the security posture of the workloads. The solution must meet the following requirements: • Use the Microsoft Cloud Adoption Framework for Azure to evaluate compliance with cloud governance policies. • Use the Azure Well-Architected Framework to secure individual workloads. What should you include in the recommendation for each requirement? To answer, drag the appropriate recommendations to the correct requirements. Each recommendation may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point.

Question 52

You are designing a ransomware mitigation strategy. You perform a ransomware risk assessment and identify business-critical assets. You need to recommend a solution to mitigate ransomware threats. The solution must follow Microsoft security best practices. Which two actions should you include in the recommendation? Each correct answer presents a complete solution. NOTE: Each correct answer is worth one point.

  1. Enable firewall logging for auditing, without restricting inbound or outbound traffic.
  2. Use extended patching cycles to reduce the risk of update-related service disruptions.
  3. Implement immutable, offline backups that have restricted access and test restore procedures regularly.
  4. Deploy Privileged Identity Management (PIM) that uses just-in-time (JIT) access and approval workflows.

Question 53

You are designing new Azure applications based on security best practices from the Microsoft Cloud Adoption Framework for Azure. Each application will be deployed to a dedicated and secure environment that will contain isolated instances of the following key Azure security resources: • Azure Key Vault • Virtual networks • An Azure subscription • Azure Policy assignments • Network security groups (NSGs) • Role-based access control (RBAC) assignments You need to recommend which type of environment and which module to use to deploy the applications. The solution must use infrastructure as code (IaC) to deploy each application environment. What should you recommend? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 54

You plan to implement an Azure environment based on Microsoft Cloud Adoption Framework for enterprise-scale landing zone architecture principles. The environment will host three apps that have the following characteristics: • Each app will have a development environment, a test environment, and a production environment. • Each environment will be managed by a separate team. • Each app will store its secrets in Azure Key Vault. You need to recommend how many Azure subscriptions and key vaults to deploy to the application landing zones. What should you recommend? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 55

You have a Microsoft 365 subscription that contains a group named Group1. The subscription contains 1,000 Windows devices that are joined to a Microsoft Entra tenant and managed by using Microsoft Intune. All users sign in to the devices by using standard user accounts. You plan to deploy a new app named App1 to the members of Group1. The Group1 members must have administrative rights to install new versions of App1. You need to ensure that the Group1 members can install new versions of App1. The solution must follow the principles of Zero Trust. What should you implement?

  1. Microsoft Entra Privileged Identity Management (PIM)
  2. Microsoft Intune Endpoint Privilege Management (EPM)
  3. Microsoft Local Administrator Password Solution (Microsoft LAPS)
  4. Microsoft Entra entitlement management