SC-100 Practice Test

SC-100 Practice Test practice questions, page 9 of 15, with answer review and explanations.

Question 41

You have an Azure subscription that contains multiple Azure Storage blobs and Azure Files shares. You need to recommend a security solution for authorizing access to the blobs and shares. The solution must meet the following requirements: • Support access to the shares by using the SMB protocol. • Limit access to the blobs to specific periods of time. • Include authentication support when possible. What should you recommend for each resource? To answer, select the options in the answer area. NOTE: Each correct selection is worth one point.

Question 42

You need to design a solution to accelerate a Zero Trust security implementation. The solution must be based on the Zero Trust Rapid Modernization Plan (RaMP). Which three initiatives should you include in the solution, and in which order should you implement the initiatives? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

Question 43

You have an Azure subscription. The subscription contains an Azure SQL database named DB1 that stores customer data. You have a Microsoft 365 subscription that uses Microsoft SharePoint Online, OneDrive, and Teams. Users frequently create Microsoft Office documents that contain data from DB1. You need to recommend a Microsoft Purview solution that meets the following requirements: • Identifies Office documents that contain customer addresses and phone numbers sourced from DB1 • Generates an alert if a user downloads an above average number of files that contain data from DB1 • Minimizes the number of false positives What should you include in the solution for each requirement? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 44

You have an Azure DevOps organization that is used to manage the development and deployment of internal apps to multiple Azure subscriptions. You need to implement a DevSecOps strategy based on Microsoft Cloud Adoption Framework for Azure principles. The solution must meet the following requirements: • All pull requests must be enforced. • All deployments to production must be approved. What should you include in the solution for each requirement? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 45

Your company uses Microsoft Defender for Cloud and Microsoft Sentinel. The company is designing an application that will have the architecture shown in the following exhibit. You are designing a logging and auditing solution for the proposed architecture. The solution must meet the following requirements: • Integrate Azure Web Application Firewall (WAF) logs with Microsoft Sentinel. • Use Defender for Cloud to review alerts from the virtual machines. What should you include in the solution? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.