SC-100 practice test

1. Question 1 · 1

   Your company has a Microsoft 365 ES subscription. The Chief Compliance Officer plans to enhance privacy management in the working environment. You need to recommend a solution to enhance the privacy management. The solution must meet the following requirements: ✑ Identify unused personal data and empower users to make smart data handling decisions. ✑ Provide users with notifications and guidance when a user sends personal data in Microsoft Teams. ✑ Provide users with recommendations to mitigate privacy risks. What should you include in the recommendation?

   Choose one answer.

   • communication compliance in insider risk management
   • Microsoft Viva Insights
   • Privacy Risk Management in Microsoft Priva
   • Advanced eDiscovery

2. Question 2 · 1

   Your company has a third-party security information and event management (SIEM) solution that uses Splunk and Microsoft Sentinel. You plan to integrate Microsoft Sentinel with Splunk. You need to recommend a solution to send security events from Microsoft Sentinel to Splunk. What should you include in the recommendation?

   Choose one answer.

   • a Microsoft Sentinel data connector
   • Azure Event Hubs
   • a Microsoft Sentinel workbook
   • Azure Data Factory

3. Question 3 · 1

   A customer follows the Zero Trust model and explicitly verifies each attempt to access its corporate applications. The customer discovers that several endpoints are infected with malware. The customer suspends access attempts from the infected endpoints. The malware is removed from the endpoints. Which two conditions must be met before endpoint users can access the corporate applications again? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

   Choose all answers that apply.

   • The client access tokens are refreshed.
   • Microsoft Intune reports the endpoints as compliant.
   • A new Azure Active Directory (Azure AD) Conditional Access policy is enforced.
   • Microsoft Defender for Endpoint reports the endpoints as compliant.

4. Question 4 · 1

   You have a customer that has a Microsoft 365 subscription and uses the Free edition of Azure Active Directory (Azure AD). The customer plans to obtain an Azure subscription and provision several Azure resources. You need to evaluate the customer's security environment. What will necessitate an upgrade from the Azure AD Free edition to the Premium edition?

   Choose one answer.

   • Azure AD Privileged Identity Management (PIM)
   • role-based authorization
   • resource-based authorization
   • Azure AD Multi-Factor Authentication

5. Question 5 · 1

   You are designing the security standards for a new Azure environment. You need to design a privileged identity strategy based on the Zero Trust model. Which framework should you follow to create the design?

   Choose one answer.

   • Microsoft Security Development Lifecycle (SDL)
   • Enhanced Security Admin Environment (ESAE)
   • Rapid Modernization Plan (RaMP)
   • Microsoft Operational Security Assurance (OSA)

6. Question 6 · 1

   A customer has a hybrid cloud infrastructure that contains a Microsoft 365 E5 subscription and an Azure subscription. All on-premises servers in the perimeter network are prevented from connecting directly to the internet. The customer recently recovered from a ransomware attack. The customer plans to deploy Microsoft Sentinel. You need to recommend solutions to meet the following requirements: ✑ Ensure that the security operations team can access the security logs and the operation logs. ✑ Ensure that the IT operations team can access only the operations logs, including the event logs of the servers in the perimeter network. Which two solutions should you include in the recommendation? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

   Choose all answers that apply.

   • a custom collector that uses the Log Analytics agent
   • the Azure Monitor agent
   • resource-based role-based access control (RBAC)
   • Azure Active Directory (Azure AD) Conditional Access policies

7. Question 7 · 1

   Your company is developing a serverless application in Azure that will have the architecture shown in the following exhibit. You need to recommend a solution to isolate the compute components on an Azure virtual network. What should you include in the recommendation?

   Choose one answer.

   

   • Azure Active Directory (Azure AD) enterprise applications
   • an Azure App Service Environment (ASE)
   • Azure service endpoints
   • an Azure Active Directory (Azure AD) application proxy

8. Question 8 · 1

   HOTSPOT - You are planning the security levels for a security access strategy. You need to identify which job roles to configure at which security levels. The solution must meet security best practices of the Microsoft Cybersecurity Reference Architectures (MCRA). Which security level should you configure for each job role? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

   Choose an option for each prompt.

   

   Developer:

   • • Enterprise security
   • • Privileged security
   • • Specialized security

   Standard user:

   • • Enterprise security
   • • Privileged security
   • • Specialized security

   IT administrator:

   • • Enterprise security
   • • Privileged security
   • • Specialized security

9. Question 9 · 1

   Your company plans to apply the Zero Trust Rapid Modernization Plan (RaMP) to its IT environment. You need to recommend the top three modernization areas to prioritize as part of the plan. Which three areas should you recommend based on RaMP? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

   Choose all answers that apply.

   • data, compliance, and governance
   • infrastructure and development
   • user access and productivity
   • operational technology (OT) and IoT
   • modern security operations

10. Question 10 · 1

    You have an Azure subscription that has Microsoft Defender for Cloud enabled. Suspicious authentication activity alerts have been appearing in the Workload protections dashboard. You need to recommend a solution to evaluate and remediate the alerts by using workflow automation. The solution must minimize development effort. What should you include in the recommendation?

    Choose one answer.

    • Azure Monitor webhooks
    • Azure Event Hubs
    • Azure Functions apps
    • Azure Logics Apps

11. Question 11 · 1

    HOTSPOT - For a Microsoft cloud environment, you are designing a security architecture based on the Microsoft Cybersecurity Reference Architectures (MCRA). You need to protect against the following external threats of an attack chain: • An attacker attempts to exfiltrate data to external websites. • An attacker attempts lateral movement across domain-joined computers. What should you include in the recommendation for each threat? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

    Choose an option for each prompt.

    

    An attacker attempts to exfiltrate data to external websites:

    • • Microsoft Defender for Cloud Apps
    • • Microsoft Defender for Identity
    • • Microsoft Defender for Office 365

    An attacker attempts lateral movement across domain-joined computers:

    • • Microsoft Defender for Cloud Apps
    • • Microsoft Defender for Identity
    • • Microsoft Defender for Office 365

12. Question 12 · 1

    For an Azure deployment, you are designing a security architecture based on the Microsoft Cloud Security Benchmark. You need to recommend a best practice for implementing service accounts for Azure API management. What should you include in the recommendation?

    Choose one answer.

    • application registrations in Azure AD
    • managed identities in Azure
    • Azure service principals with usernames and passwords
    • device registrations in Azure AD
    • Azure service principals with certificate credentials

13. Question 13 · 1

    You have an Azure AD tenant that syncs with an Active Directory Domain Services (AD DS) domain. Client computers run Windows and are hybrid-joined to Azure AD. You are designing a strategy to protect endpoints against ransomware. The strategy follows Microsoft Security Best Practices. You plan to remove all the domain accounts from the Administrators groups on the Windows computers. You need to recommend a solution that will provide users with administrative access to the Windows computers only when access is required. The solution must minimize the lateral movement of ransomware attacks if an administrator account on a computer is compromised. What should you include in the recommendation?

    Choose one answer.

    • Local Administrator Password Solution (LAPS)
    • Azure AD Identity Protection
    • Azure AD Privileged Identity Management (PIM)
    • Privileged Access Workstations (PAWs)

14. Question 14 · 1

    29 DRAG DROP For a Microsoft cloud environment, you need to recommend a security architecture that follows the Zero Trust principles of the Microsoft Cybersecurity Reference Architectures (MCRA). Which security methodologies should you include in the recommendation? To answer, drag the appropriate methodologies to the correct principles. Each methodology may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point.

    Match each destination with an option.

    

    Assume breach

    • • Business continuity
    • • Data classification
    • • Just-in-time (JIT) access
    • • Segmenting access

    Verify explicitly

    • • Business continuity
    • • Data classification
    • • Just-in-time (JIT) access
    • • Segmenting access

    Use least privilege access

    • • Business continuity
    • • Data classification
    • • Just-in-time (JIT) access
    • • Segmenting access

15. Question 15 · 1

    You have legacy operational technology (OT) devices and IoT devices. You need to recommend best practices for applying Zero Trust principles to the OT and IoT devices based on the Microsoft Cybersecurity Reference Architectures (MCRA). The solution must minimize the risk of disrupting business operations. Which two security methodologies should you include in the recommendation? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

    Choose all answers that apply.

    • active scanning
    • threat monitoring
    • software patching
    • passive traffic monitoring

Paid access to all 227 questions

Each purchase applies to this certification. Prices are one-time payments, not monthly subscriptions.