Microsoft SC-100 Exam - Topic 3 Question 64 Discussion

Actual exam question for Microsoft's SC-100 exam

Question #: 64
Topic #: 3

You need to recommend a solution for securing the landing zones. The solution must meet the landing zone requirements and the business requirements.

What should you configure for each landing zone?

AAzure DDoS Protection Standard

Ban Azure Private DNS zone

CMicrosoft Defender for Cloud

Dan ExpressRoute gateway

Show Suggested Answer

Suggested Answer: D

One of the stipulations is to meet the business requirements of minimizing costs. ExpressRoute is expensive.

Given the landing zone requirements of

1) 'Use a DNS namespace of litware.com'

2) 'Ensure that the Azure virtual machines in each landing zone communicate with Azure App Service web apps in the same zone over the Microsoft backbone network, rather than over public endpoints'

by Blythe at Apr 07, 2025, 11:26 AM

Limited Time Offer

25%

Off

Get Premium SC-100 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Yvonne

3 months ago

ExpressRoute gateway seems unnecessary for landing zones, right?

upvoted 0 times

...

Dick

3 months ago

Totally agree, it covers a lot of ground!

upvoted 0 times

...

Emilio

3 months ago

Wait, can we really rely on just one solution?

upvoted 0 times

...

Roxanne

3 months ago

Azure DDoS Protection is also crucial, don’t overlook it!

upvoted 0 times

...

Martin

4 months ago

I think Microsoft Defender for Cloud is a must for security.

upvoted 0 times

...

Haley

4 months ago

I feel like an Azure Private DNS zone could help with security, but I don't recall if it's essential for landing zones.

upvoted 0 times

...

Noah

4 months ago

I practiced a similar question where we had to secure resources, and I think an ExpressRoute gateway was mentioned, but I'm not confident about its relevance here.

upvoted 0 times

...

Breana

4 months ago

I think Microsoft Defender for Cloud might be the right choice since it covers a lot of security aspects, but I need to double-check the requirements.

upvoted 0 times

...

Leota

4 months ago

I remember we discussed Azure DDoS Protection in class, but I'm not sure if it's the best fit for landing zones specifically.

upvoted 0 times

...

Billy

5 months ago

I think I know the answer, but I want to double-check the details on each option just to be sure. Gotta get this one right!

upvoted 0 times

...

Dyan

5 months ago

Okay, I've got a strategy. I'll start by identifying the key security needs based on the landing zone requirements, then match those to the Azure services listed in the options.

upvoted 0 times

...

Tamekia

5 months ago

Hmm, I'm not sure about this one. Securing landing zones could involve a few different Azure services. I'll need to read the question closely and consider the business requirements.

upvoted 0 times

...

Shawna

5 months ago

This looks like a straightforward security configuration question. I'll review the requirements carefully and think through the options.

upvoted 0 times

...

Lili

10 months ago

Option A all the way! Azure DDoS Protection Standard is a must-have for any serious landing zone security setup.

upvoted 0 times

Staci

9 months ago

I agree, Microsoft Defender for Cloud is also a good option for meeting the security requirements.

upvoted 0 times

...

Alise

9 months ago

C) Microsoft Defender for Cloud

upvoted 0 times

...

Sommer

10 months ago

Definitely! Azure DDoS Protection Standard is essential for securing the landing zones.

upvoted 0 times

...

Buddy

10 months ago

A) Azure DDoS Protection Standard

upvoted 0 times

...

Sue

10 months ago

I believe Microsoft Defender for Cloud should also be configured to enhance security in the landing zones.

upvoted 0 times

...

Mohammad

10 months ago

I agree with Beatriz. Azure DDoS Protection Standard will help meet the security requirements.

upvoted 0 times

...

Aleisha

11 months ago

Haha, I'm going with option D. An ExpressRoute gateway? That's like bringing a bazooka to a knife fight!

upvoted 0 times

Denny

9 months ago

Yeah, option D, an ExpressRoute gateway, might be a bit overkill for securing the landing zones.

upvoted 0 times

...

Delsie

10 months ago

I agree, Azure DDoS Protection Standard is a strong solution for protecting against DDoS attacks.

upvoted 0 times

...

Karl

10 months ago

I think option A, Azure DDoS Protection Standard, would be a better choice for securing the landing zones.

upvoted 0 times

...

Beatriz

11 months ago

I think we should configure Azure DDoS Protection Standard for each landing zone.

upvoted 0 times

...

Cortney

11 months ago

I think option B is the way to go. An Azure Private DNS zone will help keep the landing zones secure and private.

upvoted 0 times

Cyril

9 months ago

Yes, combining Azure Private DNS zone with Microsoft Defender for Cloud would provide a strong security solution for the landing zones.

upvoted 0 times

...

Lisha

9 months ago

We should also consider implementing Microsoft Defender for Cloud for additional security measures.

upvoted 0 times

...

Herminia

10 months ago

I agree, using Azure Private DNS zone will definitely help meet the security requirements.

upvoted 0 times

...

Ben

10 months ago

Option B) an Azure Private DNS zone is a good choice for securing the landing zones.

upvoted 0 times

...

Goldie

11 months ago

Option C looks good to me. Microsoft Defender for Cloud can provide comprehensive security for the landing zones.

upvoted 0 times

Lashunda

10 months ago

I agree, Microsoft Defender for Cloud is a great choice to meet both the landing zone and business requirements.

upvoted 0 times

...

Rupert

10 months ago

Option C looks good to me. Microsoft Defender for Cloud can provide comprehensive security for the landing zones.

upvoted 0 times

...