Microsoft SC-100 Exam - Topic 2 Question 61 Discussion

Actual exam question for Microsoft's SC-100 exam

Question #: 61
Topic #: 2

You have a Microsoft Entra tenant named contoso.com and use Microsoft Intune. Each user in contoso.com has a Microsoft Entra ID P1 license and a Windows 11 device that has the Global Secure Access client deployed.

You plan to deploy the following configuration of Microsoft Entra Internet Access:

* Enable a baseline profile.

* Create a security profile named Profile` that has a priority of 300 and contains a single web content filtering policy named WCFPolicy configure WCFPolicy1 as follows:

o Set Action to allow.

o Include a single rule that has a fully qualified domain name (FQDN) destination of '. adatum.com.

* Link Profile1 to a Conditional Access policy named CAPolicy1, apply CAPolicy1 to all users, and grant access unless a user's device is noncompliant

You need to evaluate the impact of the planned deployment on traffic to the following resources:

* https://www.adatum.com:8433

* https://www.fabrikam.com

Which two traffic scenarios will occur? Each correct answer presents a complete solution.

NOTE: Each correct selection is worth one point

ATraffic to https://www.fabrikam.com will be allowed from all the devices.

BTraffic to https://www.adatum.com:8433 will be blocked from all the devices.

CTraffic to https://www.adatumxom:8433 will be allowed from all the devices.

DTraffic to https://www.fabrikam.com will be allowed from compliant devices only.

ETraffic to https://www.adatum.com:8433 will be allowed from compliant devices only.

FTraffic to https://www.fabrikam.com will be blocked from noncompliant devices only.

Show Suggested Answer

Suggested Answer: A, E

by Teddy at Feb 09, 2025, 06:29 PM

Limited Time Offer

25%

Off

Get Premium SC-100 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Selene

3 months ago

I’m not sure about that, seems like a tricky setup.

upvoted 0 times

...

Willard

3 months ago

Definitely agree, compliant devices only for adatum.com makes sense.

upvoted 0 times

...

Bernardo

3 months ago

Wait, how can adatum.com be blocked if it's in the allow list?

upvoted 0 times

...

Suzan

4 months ago

I think traffic to https://www.adatum.com:8433 will be blocked.

upvoted 0 times

...

Cristina

4 months ago

Traffic to https://www.fabrikam.com will be allowed from all devices.

upvoted 0 times

...

Precious

4 months ago

I feel like I might be mixing things up, but I thought that if a site isn't included in the filtering policy, like https://www.fabrikam.com, it should be allowed from all devices.

upvoted 0 times

...

Jacinta

4 months ago

I practiced a similar question where we had to evaluate traffic based on compliance, and I think that means noncompliant devices could be blocked from accessing certain sites.

upvoted 0 times

...

Tonette

4 months ago

I'm not entirely sure, but I think traffic to https://www.fabrikam.com might be allowed only from compliant devices, since there's a conditional access policy involved.

upvoted 0 times

...

Elbert

5 months ago

I remember that the web content filtering policy allows traffic to the specified FQDN, so I think traffic to https://www.adatum.com should be blocked.

upvoted 0 times

...

Janey

5 months ago

I feel pretty confident about this one. The question gives a lot of details about the Entra configuration, so I think I can use that information to determine the traffic scenarios. I'll just need to carefully read through everything and make sure I don't miss any important details.

upvoted 0 times

...

Cristen

5 months ago

This seems like a tricky one. I'm not too familiar with Entra Internet Access, so I'll need to make sure I understand the different components and how they work together. I'll take my time and try to visualize the traffic flow to the resources.

upvoted 0 times

...

Natalya

5 months ago

Okay, let's break this down step-by-step. The key things I need to focus on are the web content filtering policy and the Conditional Access policy, and how they impact the traffic to the specified resources. I think if I work through it methodically, I can get the right answer.

upvoted 0 times

...

Bea

5 months ago

Hmm, I'm a bit confused about the Conditional Access policy and how it interacts with the web content filtering policy. I'll need to carefully review the details to make sure I understand the impact on the different resources.

upvoted 0 times

...

Shenika

5 months ago

This question looks pretty straightforward. I think I can figure out the traffic scenarios based on the information provided about the Entra Internet Access configuration.

upvoted 0 times

...

Janessa

12 months ago

Haha, good catch Chara! These exam questions can get pretty tricky, but they're also a chance to showcase our tech prowess. Let's do this!

upvoted 0 times

...

Chara

12 months ago

Hmm, I'm not sure about C. I don't think the FQDN would include a typo like 'adatumxom'.

upvoted 0 times

Cyndy

11 months ago

Janet: Yeah, option C doesn't look right. It's probably a mistake in the FQDN.

upvoted 0 times

...

Tiffiny

11 months ago

User 3: I'm not sure about option C either. It does seem like a typo with 'adatumxom'.

upvoted 0 times

...

Janet

11 months ago

User 2: I agree with you, option A seems to be the right choice.

upvoted 0 times

...

Selma

11 months ago

User 1: I think option A is correct. Traffic to fabrikam.com will be allowed from all devices.

upvoted 0 times

...

Quiana

12 months ago

I agree with Aliza. The question is straightforward, and the answer is clear based on the given information.

upvoted 0 times

Nikita

12 months ago

I agree, traffic to https://www.adatum.com:8433 will be allowed from compliant devices only.

upvoted 0 times

...

Barbra

12 months ago

I think the correct answers are B and E.

upvoted 0 times

...

Thaddeus

1 year ago

I agree with Lai, as the Conditional Access policy will grant access only to compliant devices.

upvoted 0 times

...

Lai

1 year ago

I believe traffic to https://www.adatum.com:8433 will be allowed from compliant devices only.

upvoted 0 times

...

Aliza

1 year ago

B and E are the correct answers. The security profile will block traffic to adatum.com, and the conditional access policy will only allow compliant devices to access fabrikam.com.

upvoted 0 times