SC-100 Free Practice Questions — Page 11

Question 83

HOTSPOT - You have an Azure subscription that contains multiple storage accounts. The accounts contain Azure Files shares and Azure Blob Storage containers. The accounts have encryption scopes and infrastructure encryption enabled. You need to implement customer-managed key-based encryption for the shares and the containers. The solution must ensure that the encryption keys are applied at the most granular level. At which level should you apply the encryption keys? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 84

HOTSPOT - Your company has two offices named Office1 and Office2. The offices contain 1,000 on-premises Windows 11 devices that are Microsoft Entra joined. You have a Microsoft 365 subscription and use Microsoft Intune. You plan to deploy Microsoft Entra Internet Access from the offices to Microsoft 365. You enable the Microsoft 365 profile and configure the following: • A traffic policy for all Microsoft 365 traffic • A linked Conditional Access policy that has the following configurations: o Applies to all users o Performs compliant network checks o Allows Microsoft 365 traffic from compliant devices • An assignment to all devices • An assignment to the remote network associated with Office1 You deploy the Global Secure Access client to all the devices in Office2 and establish connections. Which users can access Microsoft 365 services from compliant devices, and which users are blocked from accessing Microsoft 365 services when using noncompliant devices? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 85

You have an Azure subscription. You plan to deploy Azure App Services apps by using Azure DevOps. You need to recommend a solution to ensure that deployed apps maintain compliance with Microsoft cloud security benchmark (MCSB) recommendations. What should you include in the recommendation?

Question 86

You have an Azure subscription that contains multiple Azure Blob Storage accounts. You need to recommend a solution to detect threats in files after the files are uploaded to a blob container. What should you include in the recommendation?

Question 87

You have an Azure subscription that contains multiple Azure Data Lake Storage accounts. You need to recommend a solution to encrypt the content of the accounts by using service-side encryption and customer-managed keys. The solution must ensure that individual encryption keys are applied at the most granular level. At which level should you recommend the encryption be applied?

Question 88

Your company has a Microsoft 365 E5 subscription. The company wants to identify and classify data in Microsoft Teams, SharePoint Online, and Exchange Online. You need to recommend a solution to identify documents that contain sensitive information. What should you include in the recommendation?

Question 89

You have an Azure subscription. The subscription contains 100 virtual machines that run Windows Server. The virtual machines are managed by using Azure Policy and Microsoft Defender for Servers. You need to enhance security on the virtual machines. The solution must meet the following requirements: • Ensure that only apps on an allowlist can be run. • Require administrators to confirm each app added to the allowlist. • Automatically add unauthorized apps to a blocklist when an attempt is made to launch the app. • Require administrators to approve an app before the app can be moved from the blocklist to the allowlist. What should you include in the solution?

Question 90

HOTSPOT - You have a Microsoft 365 tenant. You need to recommend a Microsoft 365 Defender solution to enhance security for the tenant. The solution must meet the following requirements: • Identify users that are downloading an unusually high number of files from Microsoft SharePoint Online sites and are possibly involved in a data exfiltration attempt. • Block Microsoft Teams messages that contain potentially malicious content by using zero-hour auto purge (ZAP). What should you recommend for each requirement? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 91

HOTSPOT - You have an Azure subscription. The subscription contains an Azure application gateway that use Azure Web Application Firewall (WAF). You deploy new Azure App Services web apps. Each app is registered automatically in the DNS domain of your company and accessible from the Internet. You need to recommend a security solution that meets the following requirements: • Detects vulnerability scans of the apps • Detects whether newly deployed apps are vulnerable to attack What should you recommend using? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 93

DRAG DROP - You have an Azure subscription that contains a resources group named RG1. RG1 contains multiple Azure Files shares. You need to recommend a solution to deploy a backup solution for the shares. The solution must meet the following requirements: • Prevent the deletion of backups and the vault used to store the backups. • Prevent privilege escalation attacks against the backup solution. • Prevent the modification of the backup retention period. Which three actions should you recommend be performed in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.