SC-100 Free Practice Questions — Page 4

Question 17

HOTSPOT - Your company has offices in New York City and London. The London office contains an on-premises app named App1. You have a Microsoft Entra tenant named contoso.com that is hosted in North America. You plan to manage access to App1 for the users in the London office by using Microsoft Entra Private Access. You will deploy Private Access by performing the following actions in the London office: • Deploy Microsoft Entra application proxy connectors. • Provision an ExpressRoute circuit to the closest peering location. You need to optimize the network for the planned deployment. The solution must meet the following requirements: • Maximize redundancy for connectivity to App1. • Minimize network latency when accessing App1. • Maximize security. • Minimize costs. What should you include in the solution? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 18

HOTSPOT - You have a Microsoft 365 subscription. Microsoft Purview is configured to protect data in only Microsoft Exchange Online and SharePoint Online. Custom sensitive information types (SITs) have been created to identify confidential data. You discover that users access third-party generative AI websites from their Windows devices. You need to recommend a solution to block AI prompts that contain confidential data and scan the AI prompts submitted to the third-party websites. What should you recommend for each requirement? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 19

HOTSPOT - You are designing new Azure applications based on security best practices from the Microsoft Cloud Adoption Framework for Azure. Each application will be deployed to a dedicated and secure environment that will contain isolated instances of the following key Azure security resources: • Azure Key Vault • Virtual networks • An Azure subscription • Azure Policy assignments • Network security groups (NSGs) • Role-based access control (RBAC) assignments You need to recommend which type of environment and which module to use to deploy the applications. The solution must use infrastructure as code (IaC) to deploy each application environment. What should you recommend? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 20

You have a Microsoft 365 subscription that contains 500 users. Each user is assigned a Microsoft 365 E5 license and uses a Windows device. Microsoft Purview data loss prevention (DLP) policies are applied to Microsoft Exchange Online email and SharePoint Online sites. You plan to monitor the usage of third-party generative AI apps by using Microsoft Purview Data Security Posture Management for AI (DSPM for AI). What should you do first?

Question 21

HOTSPOT - You have a Microsoft 365 E5 subscription. You need to recommend a security solution that meets the following requirements: • Automatically identifies and stops external, brute force attacks against accounts in the subscription • Automatically identifies and stops external attacks that use an internal account to exfiltrate data from Microsoft SharePoint Online sites in the subscription What should you include in the recommendation for each requirement? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 22

HOTSPOT - Your company has offices in 10 countries. You have a Microsoft 365 subscription that contains 1,000 users. Each user is assigned a Microsoft 365 E5 license. You plan to deploy a compliance assessment solution. The solution must meet the following requirements: • Ensure that compliance is assessed based on the regulations of the country of each office. • Provide improvement action guidance to ensure compliance of the subscription. You need to recommend the service that should be used to perform the assessments, and identify additional costs that will be incurred. What should you recommend and what should you identify? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 23

You have a Microsoft 365 subscription that uses Microsoft Purview. You need to recommend a solution that will provide guidance on how to ensure that Personally Identifiable Information (PII) in the subscription adheres to local privacy regulations. The solution must minimize administrative effort. Which Microsoft Purview solution should you include in the recommendation?

Question 24

HOTSPOT - You have an Azure subscription. You enable the Defender Cloud Security Posture Management (CSPM) plan. You need to optimize the security posture of the subscription by implementing Microsoft Defender for Cloud secure score recommendations. Which security policy should you enable, and which factors will have a direct impact on the secure score? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 25

HOTSPOT - You have an Azure subscription. You plan to deploy an Azure App Service app named App1 that will access an external web service by using a username and password. You need to recommend a password storage solution for App1 that meets the following requirements: • Ensures that the password is stored securely • Ensures that App1 can authenticate to the service that will store the password Which service should you use to store the password, and which authentication method should App1 use to access the service? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 26

You have an Azure subscription that contains a web app named App1. App1 uses a Microsoft Entra user account named SRV1 as a service account to authenticate to an Azure SQL database named DB1. You discover that a developer accessed DB1 directly by using SRV1. You need to recommend a secure authentication method that will prevent credential misuse outside of App1. The solution must minimize administrative effort. What should you recommend?