SC-100 Free Practice Questions — Page 3

Question 22

HOTSPOT - Your company has offices in 10 countries. You have a Microsoft 365 subscription that contains 1,000 users. Each user is assigned a Microsoft 365 E5 license. You plan to deploy a compliance assessment solution. The solution must meet the following requirements: • Ensure that compliance is assessed based on the regulations of the country of each office. • Provide improvement action guidance to ensure compliance of the subscription. You need to recommend the service that should be used to perform the assessments, and identify additional costs that will be incurred. What should you recommend and what should you identify? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 23

You have a Microsoft 365 subscription that uses Microsoft Purview. You need to recommend a solution that will provide guidance on how to ensure that Personally Identifiable Information (PII) in the subscription adheres to local privacy regulations. The solution must minimize administrative effort. Which Microsoft Purview solution should you include in the recommendation?

Question 24

HOTSPOT - You have an Azure subscription. You enable the Defender Cloud Security Posture Management (CSPM) plan. You need to optimize the security posture of the subscription by implementing Microsoft Defender for Cloud secure score recommendations. Which security policy should you enable, and which factors will have a direct impact on the secure score? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 25

HOTSPOT - You have an Azure subscription. You plan to deploy an Azure App Service app named App1 that will access an external web service by using a username and password. You need to recommend a password storage solution for App1 that meets the following requirements: • Ensures that the password is stored securely • Ensures that App1 can authenticate to the service that will store the password Which service should you use to store the password, and which authentication method should App1 use to access the service? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 26

You have an Azure subscription that contains a web app named App1. App1 uses a Microsoft Entra user account named SRV1 as a service account to authenticate to an Azure SQL database named DB1. You discover that a developer accessed DB1 directly by using SRV1. You need to recommend a secure authentication method that will prevent credential misuse outside of App1. The solution must minimize administrative effort. What should you recommend?

Question 27

HOTSPOT - You have three on-premises servers that run Windows Server and contain shared folders. The folders contain 10,000 files. You have a Microsoft 365 tenant that uses Microsoft Purview and includes custom sensitive information types (SITs). You have an Azure subscription that contains five Azure Blob Storage accounts and multiple web apps. The Blob Storage accounts contain data for the web apps. You need to recommend a Microsoft Purview solution to scan the storage blobs and the shared folders. The solution must use the custom SITs to identify files that contain specific data. What should you use for each type of storage? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 28

HOTSPOT - You have an on-premises datacenter. The datacenter contains a server named Server1 that runs Windows Server 2022 and a firewall that prevents Server1 from connecting to the internet. You have an Azure subscription named Sub1. You need to recommend a resiliency strategy for Server1 that incorporates a backup plan to transfer the data from Server1 to Sub1. What should you include in the recommendation? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 29

You have an Azure subscription named Sub1 that is linked to a Microsoft Entra tenant named contoso.com. Sub1 contains 20 virtual networks named Sub1_VNet1 through Sub1_VNet20. You have an Azure subscription named Sub2 that is linked to a Microsoft Entra tenant named fabrikam.com. Sub2 contains 20 virtual networks named Sub2_VNet1 through Sub2_VNet20. You need to deploy an Azure Virtual Network Manager solution that meets the following requirements: • Blocks SSH traffic on Sub1_VNet20 and Sub2_VNet20 by using network security groups (NSGs) • Blocks SSH traffic on Sub1_VNet1 through Sub1_VNet19 and Sub2_VNet1 through Sub2_VNet19 • Allows SSH traffic on Sub1_VNet20 and Sub2_VNet20 • Blocks FTP traffic on all the virtual networks • Minimizes administrative effort What is minimum number of components required for the deployment?

Question 30

You have an on-premises server named Server1. Server1 is an FTP server that can be accessed by only the users at your company. You have an Azure subscription. You need to recommend a Zero Trust Network Access (ZTNA) solution to enforce Conditional Access policies when users access Server1 from the internet. What should you include in the recommendation?

Question 31

You have an Azure subscription that contains 15 custom apps. The source files for the apps are stored in Git repositories. The apps are deployed by using Azure DevOps. You need to recommend a DevSecOps solution to implement static application security testing (SAST) of the app code to identify hard-coded secrets. What should you include in the recommendation?