SC-100 Practice Test

SC-100 Practice Test practice questions, page 14 of 15, with answer review and explanations.

Question 66

You have an Azure subscription that has Microsoft Defender for Cloud enabled. You need to enforce ISO 27001:2013 standards for the subscription. The solution must ensure that noncompliant resources are remediated automatically. What should you use?

  1. Azure Policy
  2. Azure Blueprints
  3. the regulatory compliance dashboard in Defender for Cloud
  4. Azure role-based access control (Azure RBAC)

Question 67

You have a Microsoft 365 subscription. You need to recommend a security solution to monitor the following activities: ✑ User accounts that were potentially compromised ✑ Users performing bulk file downloads from Microsoft SharePoint Online What should you include in the recommendation for each activity? To answer, drag the appropriate components to the correct activities. Each component may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point. Select and Place:

Question 68

Your company finalizes the adoption of Azure and is implementing Microsoft Defender for Cloud. You receive the following recommendations in Defender for Cloud ✑ Access to storage accounts with firewall and virtual network configurations should be restricted. ✑ Storage accounts should restrict network access using virtual network rules. ✑ Storage account should use a private link connection. ✑ Storage account public access should be disallowed. You need to recommend a service to mitigate identified risks that relate to the recommendations. What should you recommend?

  1. Azure Policy
  2. Azure Network Watcher
  3. Azure Storage Analytics
  4. Microsoft Sentinel

Question 69

You receive a security alert in Microsoft Defender for Cloud as shown in the exhibit. (Click the Exhibit tab.) After remediating the threat, which policy definition should you assign to prevent the threat from reoccurring?

  1. Storage account public access should be disallowed
  2. Azure Key Vault Managed HSM should have purge protection enabled
  3. Storage accounts should prevent shared key access
  4. Storage account keys should not be expired

Question 70

You have 50 Azure subscriptions. You need to monitor the resource in the subscriptions for compliance with the ISO 27001:2013 standards. The solution must minimize the effort required to modify the list of monitored policy definitions for the subscriptions. What are two ways to achieve the goal? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

  1. Assign an initiative to a management group.
  2. Assign a policy to each subscription.
  3. Assign a policy to a management group.
  4. Assign an initiative to each subscription.
  5. Assign a blueprint to each subscription.
  6. Assign a blueprint to a management group.