SC-100 Free Practice Questions — Page 2

Question 6

You have an Azure subscription that contains 15 custom apps. The source files for the apps are stored in Git repositories. The apps are deployed by using Azure DevOps. You need to recommend a DevSecOps solution to implement static application security testing (SAST) of the app code to identify hard-coded secrets. What should you include in the recommendation?

Question 6

You have an Azure subscription. You have a subscription to a third-party cloud provider. The subscription contains 100 virtual machines. You manage cloud security for both subscriptions from the Azure subscription. You need to recommend a solution to validate the security posture of the virtual machines. Which two services should you include in the recommendation? Each correct answer presents part of the solution. NOTE: Each correct answer is worth one point.

Question 7

DRAG DROP - You have an Azure Storage account named storage1. You plan to secure storage1 by using a Bring Your Own Key (BYOK) strategy. You create an Azure key vault named AKV1 and upload a compatible key. You need to configure storage1 to use the key stored in AKV1 for encryption. Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Question 7

You have an Azure subscription. The subscription contains multiple Azure App Service web apps that are distributed across multiple Azure regions and are accessed via the internet. You need to ensure that all incoming requests to the apps are inspected for threats based on the Core Rule Set (CRS) from the Open Web Application Security Project (OWASP). The solution must meet the following requirements: • Support the use of Microsoft-managed X.509 certificates. • Route users to the geographically closest app. • Minimize administrative effort. What should you use?

Question 8

HOTSPOT - You have an Azure subscription. You need to create an Azure policy to ensure that all the resources in the subscription have tags assigned. The solution must ensure that the policy can remediate noncompliant resources automatically. How should you configure the policy? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 9

You have a Microsoft 365 subscription that contains a group named Group1. The subscription is linked to a Microsoft Entra ID P1 tenant. You have an external software as a service (SaaS) application named App1. App1 is managed by using a web-based admin portal and supports the use of Microsoft Entra ID credentials. You need to ensure that only the members of Group1 who sign in from Microsoft Entra joined devices can access the admin portal of App1. What should you create first in Microsoft Entra?

Question 9

HOTSPOT - You have a Microsoft 365 subscription. You configure Microsoft Purview Information Protection to apply sensitivity labels automatically. You need to recommend a solution that will prevent users from uploading unlabeled files to Microsoft SharePoint Online if the files contain content defined by Microsoft Purview classifiers as sensitive. What should you include in the recommendation? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 10

DRAG DROP - You have an Azure environment that contains multiple workloads deployed across multiple subscriptions. You need to recommend a solution to assess and improve the security posture of the workloads. The solution must meet the following requirements: • Use the Microsoft Cloud Adoption Framework for Azure to evaluate compliance with cloud governance policies. • Use the Azure Well-Architected Framework to secure individual workloads. What should you include in the recommendation for each requirement? To answer, drag the appropriate recommendations to the correct requirements. Each recommendation may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point.

Question 10

Your network contains an on-premises Active Directory Domain Services (AD DS) domain named Domain1. Domain1 contains 10 domain controllers. You have an Azure subscription named Sub1 that contains a Microsoft Sentinel workspace named WS1. You have a Microsoft 365 subscription that contains 5,000 users. Each user is assigned a Microsoft 365 E3 license. You need to recommend a solution to ingest security logs from all the domain controllers into WS1. The solution must meet the following requirements: • The cost of ingesting data into WS1 must be minimized. • WS1 must ingest all the Windows Security event logs generated by the domain controllers. • The solution must support the generation of approximately 350 MB of logs per day from each domain controller. What should you recommend?

Question 11

HOTSPOT - You have an Azure DevOps organization that is used to manage the development and deployment of internal apps to multiple Azure subscriptions. You are developing a DevSecOps strategy. You need to apply DevSecOps controls for the secure code stage and the secure operations stage. The solution must be based on Microsoft Cloud Adoption Framework for Azure principles. What should you apply for each stage? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.