SC-100 Free Practice Questions — Page 7

Question 65

HOTSPOT - You have an Azure subscription that contains three Azure App Service web apps. You need to secure the apps by using Azure Web Application Firewall (WAF) on Azure Front Door. The solution must meet the following requirements: • Block attempts to access the apps from malicious bots. • Rate limit incoming connections to the apps. The solution must minimize administrative effort. What should you configure for each requirement? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 66

You have a Microsoft 365 E5 subscription and an Azure subscription. You need to recommend a solution to enforce the Zero Trust principle of explicit verification for the subscriptions. The solution must be based on Zero Trust guidance in the Microsoft Cybersecurity Reference Architectures (MCRA). What should you include in the recommendation?

Question 67

You have two Azure subscriptions named Sub1 and Sub2 that contain the vaults shown in the following table. You need to design a multi-user authorization (MUA) solution for security operations on the vaults. The solution must meet the following requirements: • RSVault1 and RSVault2 must require MUA for disabling soft delete, removing MUA protection, and disabling immutability. • BackupVault1 and BackupVault2 must require MUA for disabling soft delete and removing MUA protection. What is the minimum number of Resource Guard resources required?

Question 68

HOTSPOT - You have an Azure DevOps organization that is used to manage the development and deployment of internal apps to multiple Azure subscriptions. You need to implement a DevSecOps strategy based on Microsoft Cloud Adoption Framework for Azure principles. The solution must meet the following requirements: • All pull requests must be enforced. • All deployments to production must be approved. What should you include in the solution for each requirement? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 69

Your network contains an Active Directory Domain Services (AD DS) domain. You need to ensure that the built-in administrator account for the domain can be used only for interactive sign-ins to domain controllers. What should you configure?

Question 70

HOTSPOT - You have a Microsoft Entra tenant named contoso.com. You have 30 Azure subscriptions that are linked to contoso.com. The tenant contains the management groups shown in the following table. You need to design a governance solution to manage access to all the Azure Storage accounts across the subscriptions. The solution must meet the following requirements: • Use custom role-based access control (RBAC) to provide granular access to control plane and data plane operations. • Minimize administrative effort. At which scope should you assign the roles, and what is the minimum number of assignments per role? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 71

Your on-premises network contains an Active Directory Domain Services (AD DS) domain. The domain contains a server named Serve1 that runs Windows Server 2022. You have an Azure subscription that is linked to a hybrid Microsoft Entra tenant and contains a user named User1. User1 works remotely. You need to ensure that User1 can establish RDP connections to Server1 via the internet. The solution must ensure that User1 authenticates by using multifactor authentication (MFA). What should you include in the solution?

Question 72

Note: This section contains one or more sets of questions with the same scenario and problem. Each question presents a unique solution to the problem. You must determine whether the solution meets the stated goals. More than one solution in the set might solve the problem. It is also possible that none of the solutions in the set solve the problem. After you answer a question in this section, you will NOT be able to return. As a result, these questions do not appear on the Review Screen. You have a Microsoft 365 subscription that uses Microsoft Defender XDR. The subscription contains 500 devices that are enrolled in Microsoft Intune. The subscription contains 500 users that connect to external software as a service (SaaS) apps by using the devices. You need to implement a solution that meets the following requirements: • Allows user access to SaaS apps that Microsoft has identified as low risk • Blocks user access to SaaS apps that Microsoft has identified as high risk Solution: You configure app protection policies in Intune, and you create a Conditional Access policy. Does this meet the goal?

Question 73

Note: This section contains one or more sets of questions with the same scenario and problem. Each question presents a unique solution to the problem. You must determine whether the solution meets the stated goals. More than one solution in the set might solve the problem. It is also possible that none of the solutions in the set solve the problem. After you answer a question in this section, you will NOT be able to return. As a result, these questions do not appear on the Review Screen. You have a Microsoft 365 subscription that uses Microsoft Defender XDR. The subscription contains 500 devices that are enrolled in Microsoft Intune. The subscription contains 500 users that connect to external software as a service (SaaS) apps by using the devices. You need to implement a solution that meets the following requirements: • Allows user access to SaaS apps that Microsoft has identified as low risk • Blocks user access to Saas apps that Microsoft has identified as high risk Solution: From Microsoft Defender for Cloud Apps, you configure a cloud discovery policy and unsanction risky apps. Does this meet the goal?

Question 74

HOTSPOT - You have an Azure subscription. The subscription contains 20 App Service web apps that provide services to external customers. Each web app has a unique certificate and key. You need to recommend a solution to manage the keys and certificates of the web apps. The solution must meet the follow requirements: • Provide a single tenancy to store the keys and certificates. • Maintain FIPS 140-2 Level 3 compliance. • Follow the principle of least privilege. • Minimize costs. • Minimize administrative effort. What should you include in the recommendation? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.