SC-100 Free Practice Questions — Page 4

Question 17

You have an Azure subscription. The subscription contains 100 virtual machines that run Linux on Windows Server. The subscription uses Microsoft Defender for Servers Plan 1. You need to recommend a solution to identify and remediate virtual machines that have the following characteristics: • Are NOT onboarded to Defender for Servers • Are missing critical updates • Have risky apps installed The solution must minimize administrative effort. What should you include in the recommendation?

Question 17

HOTSPOT - Your company has offices in New York City and London. The London office contains an on-premises app named App1. You have a Microsoft Entra tenant named contoso.com that is hosted in North America. You plan to manage access to App1 for the users in the London office by using Microsoft Entra Private Access. You will deploy Private Access by performing the following actions in the London office: • Deploy Microsoft Entra application proxy connectors. • Provision an ExpressRoute circuit to the closest peering location. You need to optimize the network for the planned deployment. The solution must meet the following requirements: • Maximize redundancy for connectivity to App1. • Minimize network latency when accessing App1. • Maximize security. • Minimize costs. What should you include in the solution? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 18

You have an Azure subscription. The subscription contains 200 virtual machines that run Windows Server 2022 and are protected by using Microsoft Defender for Servers Plan 1. You have an Amazon Web Services (AWS) subscription. To the AWS subscription, you plan to deploy 100 virtual machines that run Windows Server 2022. You need to recommend which agent to deploy to the virtual machines in the AWS subscription. The solution must meet the following requirements: • Provide consistent workload protection across all cloud platforms. • Minimize the number of agents deployed to each virtual machine. What should you recommend?

Question 18

HOTSPOT - You have a Microsoft 365 subscription. Microsoft Purview is configured to protect data in only Microsoft Exchange Online and SharePoint Online. Custom sensitive information types (SITs) have been created to identify confidential data. You discover that users access third-party generative AI websites from their Windows devices. You need to recommend a solution to block AI prompts that contain confidential data and scan the AI prompts submitted to the third-party websites. What should you recommend for each requirement? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 19

You have a Microsoft 365 tenant. You have an Azure subscription that contains Azure App Service web apps. The apps have the following characteristics: • The apps use third-party and open-source components. • The apps were developed by using C#, Python, and Java. • The app deployment process is managed by using Azure DevOps. • The source code for the apps is stored in GitHub Enterprise Cloud repositories and protected by using GitHub Advanced Security. You need to reduce the risk of supply chain attacks during the application lifecycle. What should you implement?

Question 19

HOTSPOT - You are designing new Azure applications based on security best practices from the Microsoft Cloud Adoption Framework for Azure. Each application will be deployed to a dedicated and secure environment that will contain isolated instances of the following key Azure security resources: • Azure Key Vault • Virtual networks • An Azure subscription • Azure Policy assignments • Network security groups (NSGs) • Role-based access control (RBAC) assignments You need to recommend which type of environment and which module to use to deploy the applications. The solution must use infrastructure as code (IaC) to deploy each application environment. What should you recommend? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 20

DRAG DROP - You have a Microsoft 365 subscription that contains a Microsoft SharePoint Online site named Site1. You have a Conditional Access policy named Policy1 that only allows workload identities from trusted locations to access SharePoint Online. You plan to move all business-sensitive information to Site1. You need to ensure that CAPolicy1 applies to Site1 only. Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order. NOTE: More than one order of answer choices is correct. You will receive credit for any of the correct orders you select.

Question 20

You have a Microsoft 365 subscription that contains 500 users. Each user is assigned a Microsoft 365 E5 license and uses a Windows device. Microsoft Purview data loss prevention (DLP) policies are applied to Microsoft Exchange Online email and SharePoint Online sites. You plan to monitor the usage of third-party generative AI apps by using Microsoft Purview Data Security Posture Management for AI (DSPM for AI). What should you do first?

Question 21

You have a Microsoft Entra tenant named contoso.onmicrosoft.com and an Azure subscription named Sub1. You need to implement Microsoft Entra Verified ID by using Quick Verified ID setup. What should you create first?

Question 21

HOTSPOT - You have a Microsoft 365 E5 subscription. You need to recommend a security solution that meets the following requirements: • Automatically identifies and stops external, brute force attacks against accounts in the subscription • Automatically identifies and stops external attacks that use an internal account to exfiltrate data from Microsoft SharePoint Online sites in the subscription What should you include in the recommendation for each requirement? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.