SC-100 Free Practice Questions — Page 6

Question 30

You have a Microsoft 365 subscription. You have an Azure subscription. You need to implement a Microsoft Purview communication compliance solution for Microsoft Teams and Yammer. The solution must meet the following requirements: • Assign compliance policies to Microsoft 365 groups based on custom Microsoft Exchange Online attributes. • Minimize the number of compliance policies. • Minimize administrative effort. What should you include in the solution?

Question 31

You have a multicloud environment that contains an Azure subscription, an Amazon Web Services (AWS) subscription, and a Google Cloud Platform (GCP) subscription. You plan to implement Cloud Security Posture Management (CSPM) by using Microsoft Defender for Cloud. You need to design a solution that will provide attack path analysis functionality for each subscription. What should you include in the solution?

Question 32

Note: This section contains one or more sets of questions with the same scenario and problem. Each question presents a unique solution to the problem. You must determine whether the solution meets the stated goals. More than one solution in the set might solve the problem. It is also possible that none of the solutions in the set solve the problem. After you answer a question in this section, you will NOT be able to return. As a result, these questions do not appear on the Review Screen. You have a Microsoft 365 subscription that uses Microsoft Defender XDR. The subscription contains 500 devices that are enrolled in Microsoft Intune. The subscription contains 500 users that connect to external software as a service (SaaS) apps by using the devices. You need to implement a solution that meets the following requirements: • Allows user access to SaaS apps that Microsoft has identified as low risk • Blocks user access to Saas apps that Microsoft has identified as high risk Solution: From Microsoft Defender for Cloud Apps, you configure SaaS security posture management (SSPM) and create an access policy. Does this meet the goal?

Question 33

HOTSPOT - You have a Microsoft 365 subscription that is protected by using Microsoft 365 Defender. You are designing a security operations strategy that will use Microsoft Sentinel to monitor events from Microsoft 365 and Microsoft 365 Defender. You need to recommend a solution to meet the following requirements: • Integrate Microsoft Sentinel with a third-party security vendor to access information about known malware. • Automatically generate incidents when the IP address of a command-and-control server is detected in the events. What should you configure in Microsoft Sentinel to meet each requirement? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 34

HOTSPOT - You have an Azure subscription. The subscription contains an Azure SQL database named DB1 that stores customer data. You have a Microsoft 365 subscription that uses Microsoft SharePoint Online, OneDrive, and Teams. Users frequently create Microsoft Office documents that contain data from DB1. You need to recommend a Microsoft Purview solution that meets the following requirements: • Identifies Office documents that contain customer addresses and phone numbers sourced from DB1 • Generates an alert if a user downloads an above average number of files that contain data from DB1 • Minimizes the number of false positives What should you include in the solution for each requirement? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 35

HOTSPOT - You have an Azure subscription that contains an Azure key vault named Vault1. You plan to deploy multiple virtual machines that will host a custom app named App1. App1 will use secrets stored in Vault1. The virtual machines will be redeployed regularly based on the usage demands of App1. You need to recommend a solution that will enable App1 to access the secrets stored in Vault1. The solution must meet the following requirements: • Minimize the number of security principals that can access Vault1. • Minimize the storage of sensitive data on the virtual machines. • Minimize administrative effort. Which type of endpoint should App1 use to access the secrets, and which type of identity should App1 use? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 36

HOTSPOT - You plan to deploy an Azure API Management solution that will enable different groups of developers to access different sets of APIs at random times and rates. You need to recommend the pricing tier that should be purchased and the scope at which the rate limit policies should be applied. The solution must meet the following requirements: • Ensure that each group of developers can access only specific sets of APIs. • Ensure that each set of APIs can be configured with specific rate limits. • Minimize development and administrative effort and costs. What should you recommend? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 38

HOTSPOT - You have a Microsoft 365 E5 subscription. You plan to implement Microsoft Priva Subject Rights Requests for Microsoft 365 data. You need to streamline the creation and processing of subject rights requests. The solution must minimize development effort. What should you include in the solution? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 39

HOTSPOT - You have an Azure subscription that contains a Microsoft Sentinel workspace named MWS1 and an Azure Data Lake Storage account named lake1. Firewall log data is ingested into MWS1. You plan to export historical firewall log data from MWS1 to lake1. You need to ensure that security analysts can perform threat hunting from MWS1. The solution must ensure that the firewall logs stored in lake1 can be included in threat hunting queries. What should you configure? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 40

HOTSPOT - You have an Azure subscription that contains three Azure App Service web apps. You need to secure the apps by using Azure Web Application Firewall (WAF) on Azure Front Door. The solution must meet the following requirements: • Block attempts to access the apps from malicious bots. • Rate limit incoming connections to the apps. The solution must minimize administrative effort. What should you configure for each requirement? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.