SC-100 Free Practice Questions — Page 11

Question 105

You have an Azure subscription. You plan to deploy Azure Kubernetes Service (AKS) clusters that will be used to host web services. You need to recommend an ingress controller solution that will protect the hosted web services. What should you include in the recommendation?

Question 106

HOTSPOT - You have an Azure subscription. You plan to implement Azure Synapse Analytics SQL dedicated pools and SQL serverless pools. You need to recommend a solution to provide additional encryption-at-rest security for each type of pool. The solution must use customer-managed keys, whenever possible. What should you recommend for each pool type? To answer, drag the appropriate recommendations to the correct pool types. Each recommendation may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point.

Question 107

HOTSPOT - You have an Azure subscription that contains multiple storage accounts. The accounts contain Azure Files shares and Azure Blob Storage containers. The accounts have encryption scopes and infrastructure encryption enabled. You need to implement customer-managed key-based encryption for the shares and the containers. The solution must ensure that the encryption keys are applied at the most granular level. At which level should you apply the encryption keys? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 108

HOTSPOT - Your company has two offices named Office1 and Office2. The offices contain 1,000 on-premises Windows 11 devices that are Microsoft Entra joined. You have a Microsoft 365 subscription and use Microsoft Intune. You plan to deploy Microsoft Entra Internet Access from the offices to Microsoft 365. You enable the Microsoft 365 profile and configure the following: • A traffic policy for all Microsoft 365 traffic • A linked Conditional Access policy that has the following configurations: o Applies to all users o Performs compliant network checks o Allows Microsoft 365 traffic from compliant devices • An assignment to all devices • An assignment to the remote network associated with Office1 You deploy the Global Secure Access client to all the devices in Office2 and establish connections. Which users can access Microsoft 365 services from compliant devices, and which users are blocked from accessing Microsoft 365 services when using noncompliant devices? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 109

You have an Azure subscription. You plan to deploy Azure App Services apps by using Azure DevOps. You need to recommend a solution to ensure that deployed apps maintain compliance with Microsoft cloud security benchmark (MCSB) recommendations. What should you include in the recommendation?

Question 110

You have an Azure subscription that contains multiple Azure Blob Storage accounts. You need to recommend a solution to detect threats in files after the files are uploaded to a blob container. What should you include in the recommendation?

Question 111

You have an Azure subscription that contains multiple Azure Data Lake Storage accounts. You need to recommend a solution to encrypt the content of the accounts by using service-side encryption and customer-managed keys. The solution must ensure that individual encryption keys are applied at the most granular level. At which level should you recommend the encryption be applied?

Question 112

Your company has a Microsoft 365 E5 subscription. The company wants to identify and classify data in Microsoft Teams, SharePoint Online, and Exchange Online. You need to recommend a solution to identify documents that contain sensitive information. What should you include in the recommendation?

Question 113

You have an Azure subscription. The subscription contains 100 virtual machines that run Windows Server. The virtual machines are managed by using Azure Policy and Microsoft Defender for Servers. You need to enhance security on the virtual machines. The solution must meet the following requirements: • Ensure that only apps on an allowlist can be run. • Require administrators to confirm each app added to the allowlist. • Automatically add unauthorized apps to a blocklist when an attempt is made to launch the app. • Require administrators to approve an app before the app can be moved from the blocklist to the allowlist. What should you include in the solution?

Question 114

HOTSPOT - You have a Microsoft 365 tenant. You need to recommend a Microsoft 365 Defender solution to enhance security for the tenant. The solution must meet the following requirements: • Identify users that are downloading an unusually high number of files from Microsoft SharePoint Online sites and are possibly involved in a data exfiltration attempt. • Block Microsoft Teams messages that contain potentially malicious content by using zero-hour auto purge (ZAP). What should you recommend for each requirement? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.