Microsoft Exam SC-100 Topic 3 Question 64 Discussion

Actual exam question for Microsoft's SC-100 exam

Question #: 64
Topic #: 3

You need to recommend a solution for securing the landing zones. The solution must meet the landing zone requirements and the business requirements.

What should you configure for each landing zone?

AAzure DDoS Protection Standard

Ban Azure Private DNS zone

CMicrosoft Defender for Cloud

Dan ExpressRoute gateway

Show Suggested Answer

Suggested Answer: D

One of the stipulations is to meet the business requirements of minimizing costs. ExpressRoute is expensive.

Given the landing zone requirements of

1) 'Use a DNS namespace of litware.com'

2) 'Ensure that the Azure virtual machines in each landing zone communicate with Azure App Service web apps in the same zone over the Microsoft backbone network, rather than over public endpoints'

by Blythe at Apr 07, 2025, 11:26 AM

Limited Time Offer

25%

Off

Get Premium SC-100 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Lili

2 months ago

Option A all the way! Azure DDoS Protection Standard is a must-have for any serious landing zone security setup.

upvoted 0 times

Staci

1 months ago

I agree, Microsoft Defender for Cloud is also a good option for meeting the security requirements.

upvoted 0 times

...

Alise

1 months ago

C) Microsoft Defender for Cloud

upvoted 0 times

...

Sommer

2 months ago

Definitely! Azure DDoS Protection Standard is essential for securing the landing zones.

upvoted 0 times

...

Buddy

2 months ago

A) Azure DDoS Protection Standard

upvoted 0 times

...

Sue

3 months ago

I believe Microsoft Defender for Cloud should also be configured to enhance security in the landing zones.

upvoted 0 times

...

Mohammad

3 months ago

I agree with Beatriz. Azure DDoS Protection Standard will help meet the security requirements.

upvoted 0 times

...

Aleisha

3 months ago

Haha, I'm going with option D. An ExpressRoute gateway? That's like bringing a bazooka to a knife fight!

upvoted 0 times

Denny

2 months ago

Yeah, option D, an ExpressRoute gateway, might be a bit overkill for securing the landing zones.

upvoted 0 times

...

Delsie

2 months ago

I agree, Azure DDoS Protection Standard is a strong solution for protecting against DDoS attacks.

upvoted 0 times

...

Karl

2 months ago

I think option A, Azure DDoS Protection Standard, would be a better choice for securing the landing zones.

upvoted 0 times

...

Beatriz

3 months ago

I think we should configure Azure DDoS Protection Standard for each landing zone.

upvoted 0 times

...

Cortney

3 months ago

I think option B is the way to go. An Azure Private DNS zone will help keep the landing zones secure and private.

upvoted 0 times

Cyril

1 months ago

Yes, combining Azure Private DNS zone with Microsoft Defender for Cloud would provide a strong security solution for the landing zones.

upvoted 0 times

...

Lisha

2 months ago

We should also consider implementing Microsoft Defender for Cloud for additional security measures.

upvoted 0 times

...

Herminia

2 months ago

I agree, using Azure Private DNS zone will definitely help meet the security requirements.

upvoted 0 times

...

Ben

3 months ago

Option B) an Azure Private DNS zone is a good choice for securing the landing zones.

upvoted 0 times

...

Goldie

3 months ago

Option C looks good to me. Microsoft Defender for Cloud can provide comprehensive security for the landing zones.

upvoted 0 times

Lashunda

2 months ago

I agree, Microsoft Defender for Cloud is a great choice to meet both the landing zone and business requirements.

upvoted 0 times

...

Rupert

2 months ago

Option C looks good to me. Microsoft Defender for Cloud can provide comprehensive security for the landing zones.

upvoted 0 times

...