SC-100 Free Practice Questions — Page 6

Question 52

HOTSPOT - You have a Microsoft 365 E5 subscription. The subscription contains 1,000 devices that run Windows 11 Pro and are enrolled in Microsoft Intune. You need to recommend a Microsoft Defender for Cloud Apps solution that meets the following requirements: • When a user downloads a file from Microsoft SharePoint Online, a label must be applied to the file in real time based on the file’s contents. • Only users that use Intune-compliant devices must be able to sign in to Dropbox. Which type of policy should you recommend for each requirement? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 54

You have a Microsoft 365 subscription. You have an Azure subscription. You need to implement a Microsoft Purview communication compliance solution for Microsoft Teams and Yammer. The solution must meet the following requirements: • Assign compliance policies to Microsoft 365 groups based on custom Microsoft Exchange Online attributes. • Minimize the number of compliance policies. • Minimize administrative effort. What should you include in the solution?

Question 55

You have a multicloud environment that contains an Azure subscription, an Amazon Web Services (AWS) subscription, and a Google Cloud Platform (GCP) subscription. You plan to implement Cloud Security Posture Management (CSPM) by using Microsoft Defender for Cloud. You need to design a solution that will provide attack path analysis functionality for each subscription. What should you include in the solution?

Question 56

Note: This section contains one or more sets of questions with the same scenario and problem. Each question presents a unique solution to the problem. You must determine whether the solution meets the stated goals. More than one solution in the set might solve the problem. It is also possible that none of the solutions in the set solve the problem. After you answer a question in this section, you will NOT be able to return. As a result, these questions do not appear on the Review Screen. You have a Microsoft 365 subscription that uses Microsoft Defender XDR. The subscription contains 500 devices that are enrolled in Microsoft Intune. The subscription contains 500 users that connect to external software as a service (SaaS) apps by using the devices. You need to implement a solution that meets the following requirements: • Allows user access to SaaS apps that Microsoft has identified as low risk • Blocks user access to Saas apps that Microsoft has identified as high risk Solution: From Microsoft Defender for Cloud Apps, you configure SaaS security posture management (SSPM) and create an access policy. Does this meet the goal?

Question 57

HOTSPOT - You have a Microsoft 365 subscription that is protected by using Microsoft 365 Defender. You are designing a security operations strategy that will use Microsoft Sentinel to monitor events from Microsoft 365 and Microsoft 365 Defender. You need to recommend a solution to meet the following requirements: • Integrate Microsoft Sentinel with a third-party security vendor to access information about known malware. • Automatically generate incidents when the IP address of a command-and-control server is detected in the events. What should you configure in Microsoft Sentinel to meet each requirement? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 59

HOTSPOT - You have an Azure subscription. The subscription contains an Azure SQL database named DB1 that stores customer data. You have a Microsoft 365 subscription that uses Microsoft SharePoint Online, OneDrive, and Teams. Users frequently create Microsoft Office documents that contain data from DB1. You need to recommend a Microsoft Purview solution that meets the following requirements: • Identifies Office documents that contain customer addresses and phone numbers sourced from DB1 • Generates an alert if a user downloads an above average number of files that contain data from DB1 • Minimizes the number of false positives What should you include in the solution for each requirement? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 60

HOTSPOT - You have an Azure subscription that contains an Azure key vault named Vault1. You plan to deploy multiple virtual machines that will host a custom app named App1. App1 will use secrets stored in Vault1. The virtual machines will be redeployed regularly based on the usage demands of App1. You need to recommend a solution that will enable App1 to access the secrets stored in Vault1. The solution must meet the following requirements: • Minimize the number of security principals that can access Vault1. • Minimize the storage of sensitive data on the virtual machines. • Minimize administrative effort. Which type of endpoint should App1 use to access the secrets, and which type of identity should App1 use? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 61

HOTSPOT - You plan to deploy an Azure API Management solution that will enable different groups of developers to access different sets of APIs at random times and rates. You need to recommend the pricing tier that should be purchased and the scope at which the rate limit policies should be applied. The solution must meet the following requirements: • Ensure that each group of developers can access only specific sets of APIs. • Ensure that each set of APIs can be configured with specific rate limits. • Minimize development and administrative effort and costs. What should you recommend? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 63

HOTSPOT - You have a Microsoft 365 E5 subscription. You plan to implement Microsoft Priva Subject Rights Requests for Microsoft 365 data. You need to streamline the creation and processing of subject rights requests. The solution must minimize development effort. What should you include in the solution? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 64

HOTSPOT - You have an Azure subscription that contains a Microsoft Sentinel workspace named MWS1 and an Azure Data Lake Storage account named lake1. Firewall log data is ingested into MWS1. You plan to export historical firewall log data from MWS1 to lake1. You need to ensure that security analysts can perform threat hunting from MWS1. The solution must ensure that the firewall logs stored in lake1 can be included in threat hunting queries. What should you configure? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.