SC-100 Free Practice Questions — Page 2

Question 12

Your on-premises network contains an Active Directory Domain Services (AD DS) domain. The domain contains 500 Windows 11 devices. You have a Microsoft 365 subscription and an Azure subscription. You have a Microsoft Entra tenant that syncs with the domain and is linked to the subscriptions. The devices are Microsoft Entra hybrid joined. You plan to deploy a solution to mitigate attacks against privileged accounts. The solution will include Microsoft Sentinel rules that will detect attempts to use fake cached credentials. You need to recommend a solution to create the fake cached credentials on client computers. What should you recommend?

Question 13

You have a Microsoft 365 subscription that contains a group named Group1. The subscription contains 1,000 Windows devices that are joined to a Microsoft Entra tenant and managed by using Microsoft Intune. All users sign in to the devices by using standard user accounts. You plan to deploy a new app named App1 to the members of Group1. The Group1 members must have administrative rights to install new versions of App1. You need to ensure that the Group1 members can install new versions of App1. The solution must follow the principles of Zero Trust. What should you implement?

Question 14

HOTSPOT - You plan to implement an Azure environment based on Microsoft Cloud Adoption Framework for enterprise-scale landing zone architecture principles. The environment will host three apps that have the following characteristics: • Each app will have a development environment, a test environment, and a production environment. • Each environment will be managed by a separate team. • Each app will store its secrets in Azure Key Vault. You need to recommend how many Azure subscriptions and key vaults to deploy to the application landing zones. What should you recommend? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 15

HOTSPOT - You have an Azure subscription that contains an Azure Synapse Analytics workspace named workspace1. workspace1 contains a built-in serverless SQL pool and a dedicated SQL pool named Pool1. You need to recommend a second layer of data encryption for workspace1. What should you include in the recommendation for each pool? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 16

You have an Azure subscription that uses Microsoft Defender for Cloud. You have Amazon Web Services (AWS), Google Cloud Platform (GCP), and Oracle Cloud Infrastructure (OCI) subscriptions. You create a custom security standard in Defender for Cloud. To which subscriptions can the Defender for Cloud standard be applied?

Question 17

HOTSPOT - Your company has offices in New York City and London. The London office contains an on-premises app named App1. You have a Microsoft Entra tenant named contoso.com that is hosted in North America. You plan to manage access to App1 for the users in the London office by using Microsoft Entra Private Access. You will deploy Private Access by performing the following actions in the London office: • Deploy Microsoft Entra application proxy connectors. • Provision an ExpressRoute circuit to the closest peering location. You need to optimize the network for the planned deployment. The solution must meet the following requirements: • Maximize redundancy for connectivity to App1. • Minimize network latency when accessing App1. • Maximize security. • Minimize costs. What should you include in the solution? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 18

HOTSPOT - You have a Microsoft 365 subscription. Microsoft Purview is configured to protect data in only Microsoft Exchange Online and SharePoint Online. Custom sensitive information types (SITs) have been created to identify confidential data. You discover that users access third-party generative AI websites from their Windows devices. You need to recommend a solution to block AI prompts that contain confidential data and scan the AI prompts submitted to the third-party websites. What should you recommend for each requirement? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 19

HOTSPOT - You are designing new Azure applications based on security best practices from the Microsoft Cloud Adoption Framework for Azure. Each application will be deployed to a dedicated and secure environment that will contain isolated instances of the following key Azure security resources: • Azure Key Vault • Virtual networks • An Azure subscription • Azure Policy assignments • Network security groups (NSGs) • Role-based access control (RBAC) assignments You need to recommend which type of environment and which module to use to deploy the applications. The solution must use infrastructure as code (IaC) to deploy each application environment. What should you recommend? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 20

You have a Microsoft 365 subscription that contains 500 users. Each user is assigned a Microsoft 365 E5 license and uses a Windows device. Microsoft Purview data loss prevention (DLP) policies are applied to Microsoft Exchange Online email and SharePoint Online sites. You plan to monitor the usage of third-party generative AI apps by using Microsoft Purview Data Security Posture Management for AI (DSPM for AI). What should you do first?

Question 21

HOTSPOT - You have a Microsoft 365 E5 subscription. You need to recommend a security solution that meets the following requirements: • Automatically identifies and stops external, brute force attacks against accounts in the subscription • Automatically identifies and stops external attacks that use an internal account to exfiltrate data from Microsoft SharePoint Online sites in the subscription What should you include in the recommendation for each requirement? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.