SC-100 Free Practice Questions — Page 3

Question 11

You have a Microsoft 365 subscription. You have a Conditional Access policy that has the following settings: • Name: Policy 1 • Assignments o Users: - Include: All users o Target resources - Include: Select apps; Office 365 o Network - Include: Any network or location - Exclude: Selected networks and locations; Site1 o Access controls - Grant: Require multifactor authentication, Require Hybrid Microsoft Entra joined device You plan to implement Zero Trust Rapid Modernization Plan (RaMP). You need to ensure that Policy1 aligns with best practice recommendations in RaMP. Which setting should you change?

Question 12

You have an Azure subscription and a Microsoft 365 subscription. Your company uses several software as a service (SaaS) applications. To align with Microsoft cloud security benchmark (MCSB) and Microsoft Cybersecurity Reference Architectures (MCRA), you plan to design a solution to provide visibility into user activity across the applications and detect potentially risky behavior in real time. Which service should you recommend?

Question 12

Your on-premises network contains an Active Directory Domain Services (AD DS) domain. The domain contains 500 Windows 11 devices. You have a Microsoft 365 subscription and an Azure subscription. You have a Microsoft Entra tenant that syncs with the domain and is linked to the subscriptions. The devices are Microsoft Entra hybrid joined. You plan to deploy a solution to mitigate attacks against privileged accounts. The solution will include Microsoft Sentinel rules that will detect attempts to use fake cached credentials. You need to recommend a solution to create the fake cached credentials on client computers. What should you recommend?

Question 13

HOTSPOT - You have a Microsoft 365 E5 subscription. You need to mitigate ransomware attacks against messages posted to Microsoft Teams channels and files stored in Teams channels. What should you include in the solution for each type of content? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 13

You have a Microsoft 365 subscription that contains a group named Group1. The subscription contains 1,000 Windows devices that are joined to a Microsoft Entra tenant and managed by using Microsoft Intune. All users sign in to the devices by using standard user accounts. You plan to deploy a new app named App1 to the members of Group1. The Group1 members must have administrative rights to install new versions of App1. You need to ensure that the Group1 members can install new versions of App1. The solution must follow the principles of Zero Trust. What should you implement?

Question 14

HOTSPOT - You have 500 Windows 11 devices and 200 macOS devices. The devices are managed by using Microsoft Intune and are subject to compliance policies. You plan to deploy the following Intune features: • Security baselines • Remote lock of noncompliant devices Which feature will be supported by each platform? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point

Question 14

HOTSPOT - You plan to implement an Azure environment based on Microsoft Cloud Adoption Framework for enterprise-scale landing zone architecture principles. The environment will host three apps that have the following characteristics: • Each app will have a development environment, a test environment, and a production environment. • Each environment will be managed by a separate team. • Each app will store its secrets in Azure Key Vault. You need to recommend how many Azure subscriptions and key vaults to deploy to the application landing zones. What should you recommend? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 15

HOTSPOT - You have a Microsoft 365 E5 subscription that uses Microsoft Teams. Your company has an investment department and a research department. Each department has a compliance team. You are designing a Microsoft Purview Information Barriers (IBs) solution to restrict communication between the departments. The solution must meet the following requirements: • The employees in each department must only be able to communicate with the employees in their respective department. • The employees on the compliance team of each department must be able to communicate with the employees on the compliance team of the other department. What is the minimum number of segments and IB policies required? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 15

HOTSPOT - You have an Azure subscription that contains an Azure Synapse Analytics workspace named workspace1. workspace1 contains a built-in serverless SQL pool and a dedicated SQL pool named Pool1. You need to recommend a second layer of data encryption for workspace1. What should you include in the recommendation for each pool? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 16

You have an Azure subscription that uses Microsoft Defender for Cloud. You have Amazon Web Services (AWS), Google Cloud Platform (GCP), and Oracle Cloud Infrastructure (OCI) subscriptions. You create a custom security standard in Defender for Cloud. To which subscriptions can the Defender for Cloud standard be applied?