[Nov 17, 2022] SC-100 Exam Brain Dumps - Study Notes and Theory
Pass Microsoft SC-100 Test Practice Test Questions Exam Dumps
NEW QUESTION 19
You have an Azure subscription that is used as an Azure landing zone for an application. You need to evaluate the security posture of all the workloads in the landing zone. What should you do first?
- A. Obtain Azure Active Directory Premium Plan 2 licenses.
- B. Configure Continuous Integration/Continuous Deployment (CI/CD) vulnerability scanning.
- C. Enable the Defender plan for all resource types in Microsoft Defender for Cloud.
- D. Add Microsoft Sentinel data connectors.
Answer: D
NEW QUESTION 20
Your company plans to provision blob storage by using an Azure Storage account The blob storage will be accessible from 20 application sewers on the internet. You need to recommend a solution to ensure that only the application servers can access the storage account. What should you recommend using to secure the blob storage?
- A. service tags in network security groups (NSGs)
- B. firewall rules for the storage account
- C. inbound rules in Azure Firewall
- D. inbound rules in network security groups (NSGs)
- E. managed rule sets in Azure Web Application Firewall (WAF) policies
Answer: D
NEW QUESTION 21
You need to recommend a solution to evaluate regulatory compliance across the entire managed environment. The solution must meet the regulatory compliance requirements and the business requirements.
What should you recommend? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION 22
You need to recommend a strategy for App Service web app connectivity. The solution must meet the landing zone requirements. What should you recommend? To answer, select the appropriate options in the answer area. NOTE Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION 23
Your company has Microsoft 365 E5 licenses and Azure subscriptions.
The company plans to automatically label sensitive data stored in the following locations:
* Microsoft SharePoint Online
* Microsoft Exchange Online
* Microsoft Teams
You need to recommend a strategy to identify and protect sensitive data.
Which scope should you recommend for the sensitivity label policies? To answer, drag the appropriate scopes to the correct locations. Each scope may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION 24
You need to recommend a solution to evaluate regulatory compliance across the entire managed environment. The solution must meet the regulatory compliance requirements and the business requirements.
What should you recommend? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION 25
You need to recommend a solution to meet the compliance requirements.
What should you recommend? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
NEW QUESTION 26
Your company is designing an application architecture for Azure App Service Environment (ASE) web apps as shown in the exhibit. (Click the Exhibit tab.)
Communication between the on-premises network and Azure uses an ExpressRoute connection.
You need to recommend a solution to ensure that the web apps can communicate with the on-premises application server. The solution must minimize the number of public IP addresses that are allowed to access the on-premises network.
What should you include in the recommendation?
- A. Azure Firewall with policy rule sets
- B. Azure Application Gateway v2 with user-defined routes (UDRs).
- C. Azure Traffic Manager with priority traffic-routing methods
- D. Azure Front Door with Azure Web Application Firewall (WAF)
Answer: C
NEW QUESTION 27
You need to recommend a solution to meet the compliance requirements.
What should you recommend? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION 28
You need to design a solution to provide administrators with secure remote access to the virtual machines. The solution must meet the following requirements:
* Prevent the need to enable ports 3389 and 22 from the internet.
* Only provide permission to connect the virtual machines when required.
* Ensure that administrators use the Azure portal to connect to the virtual machines.
Which two actions should you include in the solution? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
- A. Enable just-in-time (JIT) VM access.
- B. Enable Azure Active Directory (Azure AD) Privileged Identity Management (PIM) roles as virtual machine contributors.
- C. Configure Azure Bastion.
- D. Enable Just Enough Administration (JEA).
- E. Configure Azure VPN Gateway.
Answer: C,D
NEW QUESTION 29
You have a customer that has a Microsoft 365 subscription and an Azure subscription.
The customer has devices that run either Windows, iOS, Android, or macOS. The Windows devices are deployed on-premises and in Azure.
You need to design a security solution to assess whether all the devices meet the customer's compliance rules.
What should you include in the solution?
- A. Microsoft Information Protection
- B. Microsoft Sentinel
- C. Microsoft Endpoint Manager
- D. Microsoft Defender for Endpoint
Answer: C
NEW QUESTION 30
Your company has a multi-cloud environment that contains a Microsoft 365 subscription, an Azure subscription, and Amazon Web Services (AWS) implementation. You need to recommend a security posture management solution for the following components:
* Azure loT Edge devices
* AWS EC2 instances
Which services should you include in the recommendation? To answer, select the appropriate options in the answer are a. NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION 31
You have a Microsoft 365 E5 subscription and an Azure subscription. You are designing a Microsoft Sentinel deployment.
You need to recommend a solution for the security operations team. The solution must include custom views and a dashboard for analyzing security events. What should you recommend using in Microsoft Sentinel?
- A. playbooks
- B. threat intelligence
- C. workbooks
- D. notebooks
Answer: D
NEW QUESTION 32
You have Microsoft Defender for Cloud assigned to Azure management groups.
You have a Microsoft Sentinel deployment.
During the triage of alerts, you require additional information about the security events, including suggestions for remediation. Which two components can you use to achieve the goal? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.
- A. workload protections in Defender for Cloud
- B. Microsoft Sentinel threat intelligence workbooks
- C. threat intelligence reports in Defender for Cloud
- D. Microsoft Sentinel notebooks
Answer: A,B
NEW QUESTION 33
Your company is migrating data to Azure. The data contains Personally Identifiable Information (Pll). The company plans to use Microsoft Information Protection for the Pll data store in Azure. You need to recommend a solution to discover Pll data at risk in the Azure resources.
What should you include in the recommendation? To answer, select the appropriate options in the answer are
a. NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION 34
You have a Microsoft 365 E5 subscription and an Azure subscripts You need to evaluate the existing environment to increase the overall security posture for the following components:
* Windows 11 devices managed by Microsoft Intune
* Azure Storage accounts
* Azure virtual machines
What should you use to evaluate the components? To answer, select the appropriate options in the answer area.
Answer:
Explanation:
NEW QUESTION 35
......
Verified SC-100 dumps Q&As - SC-100 dumps with Correct Answers: https://www.actualpdf.com/SC-100_exam-dumps.html
The Best Microsoft Certified: Cybersecurity Architect Expert Study Guide for the SC-100 Exam: https://drive.google.com/open?id=1un_T6qhrGceyXquwIqGVjIon34GF-aSz
