SC-100 Practice Test

SC-100 Practice Test practice questions, page 6 of 15, with answer review and explanations.

Question 26

You are designing a ransomware response plan that follows Microsoft Security Best Practices. You need to recommend a solution to minimize the risk of a ransomware attack encrypting local user files. What should you include in the recommendation?

  1. Windows Defender Device Guard
  2. Microsoft Defender for Endpoint
  3. Azure Files
  4. BitLocker Drive Encryption (BitLocker)
  5. protected folders

Question 27

You have an Azure AD tenant that syncs with an Active Directory Domain Services (AD DS) domain. You are designing an Azure DevOps solution to deploy applications to an Azure subscription by using continuous integration and continuous deployment (CI/CD) pipelines. You need to recommend which types of identities to use for the deployment credentials of the service connection. The solution must follow DevSecOps best practices from the Microsoft Cloud Adoption Framework for Azure. What should you recommend?

  1. a managed identity in Azure
  2. an Azure AD user account that has role assignments in Azure AD Privileged Identity Management (PIM)
  3. a group managed service account (gMSA)
  4. an Azure AD user account that has a password stored in Azure Key Vault

Question 28

You have an Azure Kubernetes Service (AKS) cluster that hosts Linux nodes. You need to recommend a solution to ensure that deployed worker nodes have the latest kernel updates. The solution must minimize administrative effort. What should you recommend?

  1. The nodes must restart after the updates are applied.
  2. The updates must first be applied to the image used to provision the nodes.
  3. The AKS cluster version must be upgraded.

Question 29

You have the following on-premises servers that run Windows Server: • Two domain controllers in an Active Directory Domain Services (AD DS) domain • Two application servers named Server1 and Server2 that run ASP.NET web apps • A VPN server named Served that authenticates by using RADIUS and AD DS End users use a VPN to access the web apps over the internet. You need to redesign a user access solution to increase the security of the connections to the web apps. The solution must minimize the attack surface and follow the Zero Trust principles of the Microsoft Cybersecurity Reference Architectures (MCRA). What should you include in the recommendation?

  1. Publish the web apps by using Azure AD Application Proxy.
  2. Configure the VPN to use Azure AD authentication.
  3. Configure connectors and rules in Microsoft Defender for Cloud Apps.
  4. Configure web protection in Microsoft Defender for Endpoint.

Question 30

You have a Microsoft 365 E5 subscription that uses Microsoft Purview, SharePoint Online, and OneDrive for Business. You need to recommend a ransomware protection solution that meets the following requirements: • Mitigates attacks that make copies of files, encrypt the copies, and then delete the original files • Mitigates attacks that encrypt files in place • Minimizes administrative effort What should you include in the recommendation? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.