SC-100 Free Practice Questions

Question 1

You have an Azure subscription and a Microsoft 365 subscription. All users are assigned Microsoft 365 E5 licenses. All computers run Windows 11 and are Microsoft Entra joined. You need to recommend a solution to prevent computers that run early builds of Windows 11 from connecting to Microsoft 365 services. Which two types of policies should you include in the recommendation? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

Question 2

You have an Azure subscription. You have an on-premises datacenter. The datacenter contains 20 servers that run Windows Server. Each server is onboarded to Azure Arc and is protected by using Microsoft Defender for Servers Plan 1. You have a Microsoft 365 subscription. You need to recommend a solution to identify which servers have outdated hardware drivers or firmware. What should you include in the recommendation?

Question 3

You have an Azure subscription. You have an on-premises datacenter that contains Microsoft SQL Server instances. Each instance contains multiple databases. You have a Microsoft 365 subscription. You plan to implement a solution to scan the databases for vulnerabilities that compromise data security. You need to recommend what to configure before the databases can be scanned. What should you recommend?

Question 4

HOTSPOT - You have a Microsoft Entra tenant named contoso.com that is linked to an Azure subscription named Sub1 and a Microsoft 365 subscription. Sub1 contains a publicly accessible Azure App Service web app named App1. You have an external partner that has a Microsoft Entra tenant named fabrikam.com. You need to recommend a solution that meets the following requirements: • Ensures that the users in fabrikam.com can be granted permissions to specific Microsoft Teams channels in contoso.com • Ensures that the users of App1 can authenticate by using social media accounts • Minimizes administrative effort Which authentication method should you recommend for each requirement? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 5

You are designing a ransomware mitigation strategy. You perform a ransomware risk assessment and identify business-critical assets. You need to recommend a solution to mitigate ransomware threats. The solution must follow Microsoft security best practices. Which two actions should you include in the recommendation? Each correct answer presents a complete solution. NOTE: Each correct answer is worth one point.

Question 6

You have an Azure subscription. You have a subscription to a third-party cloud provider. The subscription contains 100 virtual machines. You manage cloud security for both subscriptions from the Azure subscription. You need to recommend a solution to validate the security posture of the virtual machines. Which two services should you include in the recommendation? Each correct answer presents part of the solution. NOTE: Each correct answer is worth one point.

Question 7

You have an Azure subscription. The subscription contains multiple Azure App Service web apps that are distributed across multiple Azure regions and are accessed via the internet. You need to ensure that all incoming requests to the apps are inspected for threats based on the Core Rule Set (CRS) from the Open Web Application Security Project (OWASP). The solution must meet the following requirements: • Support the use of Microsoft-managed X.509 certificates. • Route users to the geographically closest app. • Minimize administrative effort. What should you use?

Question 9

HOTSPOT - You have a Microsoft 365 subscription. You configure Microsoft Purview Information Protection to apply sensitivity labels automatically. You need to recommend a solution that will prevent users from uploading unlabeled files to Microsoft SharePoint Online if the files contain content defined by Microsoft Purview classifiers as sensitive. What should you include in the recommendation? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 10

Your network contains an on-premises Active Directory Domain Services (AD DS) domain named Domain1. Domain1 contains 10 domain controllers. You have an Azure subscription named Sub1 that contains a Microsoft Sentinel workspace named WS1. You have a Microsoft 365 subscription that contains 5,000 users. Each user is assigned a Microsoft 365 E3 license. You need to recommend a solution to ingest security logs from all the domain controllers into WS1. The solution must meet the following requirements: • The cost of ingesting data into WS1 must be minimized. • WS1 must ingest all the Windows Security event logs generated by the domain controllers. • The solution must support the generation of approximately 350 MB of logs per day from each domain controller. What should you recommend?

Question 11

You have a Microsoft 365 subscription. You have a Conditional Access policy that has the following settings: • Name: Policy 1 • Assignments o Users: - Include: All users o Target resources - Include: Select apps; Office 365 o Network - Include: Any network or location - Exclude: Selected networks and locations; Site1 o Access controls - Grant: Require multifactor authentication, Require Hybrid Microsoft Entra joined device You plan to implement Zero Trust Rapid Modernization Plan (RaMP). You need to ensure that Policy1 aligns with best practice recommendations in RaMP. Which setting should you change?