SC-100 Free Practice Questions — Page 5

Question 42

You have an Azure subscription. The subscription contains 100 virtual machines that run Linux on Windows Server. The subscription uses Microsoft Defender for Servers Plan 1. You need to recommend a solution to identify and remediate virtual machines that have the following characteristics: • Are NOT onboarded to Defender for Servers • Are missing critical updates • Have risky apps installed The solution must minimize administrative effort. What should you include in the recommendation?

Question 43

You have an Azure subscription. The subscription contains 200 virtual machines that run Windows Server 2022 and are protected by using Microsoft Defender for Servers Plan 1. You have an Amazon Web Services (AWS) subscription. To the AWS subscription, you plan to deploy 100 virtual machines that run Windows Server 2022. You need to recommend which agent to deploy to the virtual machines in the AWS subscription. The solution must meet the following requirements: • Provide consistent workload protection across all cloud platforms. • Minimize the number of agents deployed to each virtual machine. What should you recommend?

Question 44

You have a Microsoft 365 tenant. You have an Azure subscription that contains Azure App Service web apps. The apps have the following characteristics: • The apps use third-party and open-source components. • The apps were developed by using C#, Python, and Java. • The app deployment process is managed by using Azure DevOps. • The source code for the apps is stored in GitHub Enterprise Cloud repositories and protected by using GitHub Advanced Security. You need to reduce the risk of supply chain attacks during the application lifecycle. What should you implement?

Question 45

DRAG DROP - You have a Microsoft 365 subscription that contains a Microsoft SharePoint Online site named Site1. You have a Conditional Access policy named Policy1 that only allows workload identities from trusted locations to access SharePoint Online. You plan to move all business-sensitive information to Site1. You need to ensure that CAPolicy1 applies to Site1 only. Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order. NOTE: More than one order of answer choices is correct. You will receive credit for any of the correct orders you select.

Question 46

You have a Microsoft Entra tenant named contoso.onmicrosoft.com and an Azure subscription named Sub1. You need to implement Microsoft Entra Verified ID by using Quick Verified ID setup. What should you create first?

Question 47

You have an Azure subscription that is linked to a Microsoft Entra tenant. You plan deploy an enterprise application named App1. App1 requires LDAP to look up attributes related to Microsoft Entra users. You need to recommend a solution to support the LDAP requirement. What should you recommend?

Question 48

HOTSPOT - You have a Microsoft Entra tenant named contoso.com that syncs with an Active Directory Domain Services (AD DS) domain named corp.contoso.com The domain contains 100 devices that have the following configurations: • Hybrid joined • Enrolled in Microsoft Intune • Disabled built-in local administrator account • Contain a local user account named User1 that is a member of the local administrators group You need to recommend a solution that meets the following requirements: • Ensures that the Directory Services Restore Mode (DSRM) credentials of each domain controller are backed up to the AD DS database • Ensures that the password of User1 changes automatically every 60 days • Ensures that the credentials of User1 are stored in an encrypted store • Prevents the User1 password from being changed manually • Whenever possible, stores all credentials in contoso.com • Minimizes administrative effort What should you include in the recommendation? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 49

HOTSPOT - You have an Azure subscription that contains Azure App Service apps. The apps have the following characteristics: • The apps are deployed by using continuous integration and continuous deployment (CI/CD) pipelines in Azure DevOps. • The apps are deployed to a test environment first, and then to a production environment. • The source code for the apps is stored in Azure Repos. You plan to implement DevSecOps controls based on the Microsoft Cloud Adoption Framework for Azure. You need to recommend testing controls to meet the following requirements: • All the source code must be tested for security vulnerabilities in Azure Repos before deploying the apps. • Once the apps are deployed to the test environment, they must be tested for security vulnerabilities. Which testing method should you recommend for each stage? To answer, select the options in the answer area. NOTE: Each correct answer is worth one point.

Question 50

HOTSPOT - You have an Azure subscription that contains multiple apps. The apps are deployed by using continuous integration and continuous delivery (CI/CD) pipelines in Azure DevOps. You need to integrate static application security testing (SAST) and security smoke testing into the pipelines based on Microsoft Cloud Adoption Framework for Azure principles. At which stage of the CI/CID process should each type of test be integrated? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 51

You have a Microsoft 365 E5 subscription. The subscription contains 500 devices that run Windows 11 Pro and are enrolled in Microsoft Intune. You need to evaluate the use of Microsoft Defender Vulnerability Management to provide recommended configuration changes for the devices. Which Endpoint security settings should you use to review the recommended changes?