SC-100 Free Practice Questions — Page 4

Question 32

DRAG DROP - You have an Azure Storage account named storage1. You plan to secure storage1 by using a Bring Your Own Key (BYOK) strategy. You create an Azure key vault named AKV1 and upload a compatible key. You need to configure storage1 to use the key stored in AKV1 for encryption. Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Question 33

HOTSPOT - You have an Azure subscription. You need to create an Azure policy to ensure that all the resources in the subscription have tags assigned. The solution must ensure that the policy can remediate noncompliant resources automatically. How should you configure the policy? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 34

You have a Microsoft 365 subscription that contains a group named Group1. The subscription is linked to a Microsoft Entra ID P1 tenant. You have an external software as a service (SaaS) application named App1. App1 is managed by using a web-based admin portal and supports the use of Microsoft Entra ID credentials. You need to ensure that only the members of Group1 who sign in from Microsoft Entra joined devices can access the admin portal of App1. What should you create first in Microsoft Entra?

Question 35

DRAG DROP - You have an Azure environment that contains multiple workloads deployed across multiple subscriptions. You need to recommend a solution to assess and improve the security posture of the workloads. The solution must meet the following requirements: • Use the Microsoft Cloud Adoption Framework for Azure to evaluate compliance with cloud governance policies. • Use the Azure Well-Architected Framework to secure individual workloads. What should you include in the recommendation for each requirement? To answer, drag the appropriate recommendations to the correct requirements. Each recommendation may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point.

Question 36

HOTSPOT - You have an Azure DevOps organization that is used to manage the development and deployment of internal apps to multiple Azure subscriptions. You are developing a DevSecOps strategy. You need to apply DevSecOps controls for the secure code stage and the secure operations stage. The solution must be based on Microsoft Cloud Adoption Framework for Azure principles. What should you apply for each stage? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 37

You have an Azure subscription and a Microsoft 365 subscription. Your company uses several software as a service (SaaS) applications. To align with Microsoft cloud security benchmark (MCSB) and Microsoft Cybersecurity Reference Architectures (MCRA), you plan to design a solution to provide visibility into user activity across the applications and detect potentially risky behavior in real time. Which service should you recommend?

Question 38

HOTSPOT - You have a Microsoft 365 E5 subscription. You need to mitigate ransomware attacks against messages posted to Microsoft Teams channels and files stored in Teams channels. What should you include in the solution for each type of content? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 39

HOTSPOT - You have 500 Windows 11 devices and 200 macOS devices. The devices are managed by using Microsoft Intune and are subject to compliance policies. You plan to deploy the following Intune features: • Security baselines • Remote lock of noncompliant devices Which feature will be supported by each platform? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point

Question 40

HOTSPOT - You have a Microsoft 365 E5 subscription that uses Microsoft Teams. Your company has an investment department and a research department. Each department has a compliance team. You are designing a Microsoft Purview Information Barriers (IBs) solution to restrict communication between the departments. The solution must meet the following requirements: • The employees in each department must only be able to communicate with the employees in their respective department. • The employees on the compliance team of each department must be able to communicate with the employees on the compliance team of the other department. What is the minimum number of segments and IB policies required? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 41

You have an Azure subscription that contains the Azure Virtual Machine Scale Sets shown in the following table. You are evaluating Azure Update Manager and automatic virtual machine guest patching. Which virtual machine scale sets will automatic guest patching support?