Microsoft SC-100 Exam - Topic 14 Question 12 Discussion

Actual exam question for Microsoft's SC-100 exam

Question #: 12
Topic #: 14

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have an Azure subscription that has Microsoft Defender for Cloud enabled.

You are evaluating the Azure Security Benchmark V3 report.

In the Secure management ports controls, you discover that you have 0 out of a potential 8 points.

You need to recommend configurations to increase the score of the Secure management ports controls.

Solution: You recommend enabling the VMAccess extension on all virtual machines.

Does this meet the goal?

AYes

BNo

Show Suggested Answer

Suggested Answer: B

https://docs.microsoft.com/en-us/security/benchmark/azure/security-controls-v3-privileged-access#pa-2-avoid-standing-access-for-user-accounts-and-permissions

Adaptive Network Hardening: https://docs.microsoft.com/en-us/security/benchmark/azure/security-controls-v3-network-security#ns-7-simplify-network-security-configuration

by Lettie at Sep 19, 2022, 04:19 PM

Limited Time Offer

25%

Off

Get Premium SC-100 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Devora

5 months ago

Nope, that's not enough for a full score.

upvoted 0 times

...

Tina

5 months ago

I thought there were other configurations needed too.

upvoted 0 times

...

Hoa

5 months ago

Wait, does that really cover all secure management ports?

upvoted 0 times

...

Noelia

5 months ago

Totally agree, it's a good step!

upvoted 0 times

...

Krystina

5 months ago

Enabling VMAccess extension helps with management access.

upvoted 0 times

...

Adela

5 months ago

I’m leaning towards "No" because I think there are specific settings for management ports that need to be configured, not just enabling an extension.

upvoted 0 times

...

Simona

5 months ago

I vaguely recall that the VMAccess extension is more about resetting passwords and enabling access rather than securing management ports.

upvoted 0 times

...

Danica

5 months ago

I think we practiced a similar question where we had to secure management ports, and I feel like there were other configurations we needed to consider.

upvoted 0 times

...

Steffanie

6 months ago

I remember studying the Azure Security Benchmark, but I'm not sure if enabling the VMAccess extension directly impacts the secure management ports score.

upvoted 0 times

...

Lauran

6 months ago

This seems like a straightforward question about hospital management. I'll carefully read through the options and think about the key responsibilities of each group.

upvoted 0 times

...

Nana

6 months ago

Alright, time to put my problem-solving skills to the test. I'll work through this methodically and make sure I don't miss any important details.

upvoted 0 times

...

Fausto

6 months ago

Okay, let me think this through. I'm leaning towards C - applying a permission set to the business unit. That way I can customize the permissions exactly how I need them for this use case.

upvoted 0 times

...

Mindy

6 months ago

Hmm, I'm a bit unsure about this one. The options seem similar, so I'll need to read carefully to determine the main responsibility for quality system audits.

upvoted 0 times

...