Halloween Special 2026! Get Up to 25% OFF Practice Questions! Limited Time - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

Microsoft SC-100 Exam - Topic 3 Question 64 Discussion

Posted by Blythe on Apr 07, 2025 at 11:26 AM

You need to recommend a solution for securing the landing zones. The solution must meet the landing zone requirements and the business requirements.

What should you configure for each landing zone?

Suggested Answer: D

One of the stipulations is to meet the business requirements of minimizing costs. ExpressRoute is expensive.

Given the landing zone requirements of

1) 'Use a DNS namespace of litware.com'

2) 'Ensure that the Azure virtual machines in each landing zone communicate with Azure App Service web apps in the same zone over the Microsoft backbone network, rather than over public endpoints'


Get Premium SC-100 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test
33 comments · newest first
YV
Yvonne 10 months ago
ExpressRoute gateway seems unnecessary for landing zones, right?
DI
Dick 10 months ago
Totally agree, it covers a lot of ground!
EM
Emilio 11 months ago
Wait, can we really rely on just one solution?
RO
Roxanne 11 months ago
Azure DDoS Protection is also crucial, don’t overlook it!
MA
Martin 11 months ago
I think Microsoft Defender for Cloud is a must for security.
HA
Haley 11 months ago
I feel like an Azure Private DNS zone could help with security, but I don't recall if it's essential for landing zones.
NO
Noah 12 months ago
I practiced a similar question where we had to secure resources, and I think an ExpressRoute gateway was mentioned, but I'm not confident about its relevance here.
BR
Breana 12 months ago
I think Microsoft Defender for Cloud might be the right choice since it covers a lot of security aspects, but I need to double-check the requirements.
LE
Leota 12 months ago
I remember we discussed Azure DDoS Protection in class, but I'm not sure if it's the best fit for landing zones specifically.
BI
Billy 1 year ago
I think I know the answer, but I want to double-check the details on each option just to be sure. Gotta get this one right!
DY
Dyan 1 year ago
Okay, I've got a strategy. I'll start by identifying the key security needs based on the landing zone requirements, then match those to the Azure services listed in the options.
TA
Tamekia 1 year ago
Hmm, I'm not sure about this one. Securing landing zones could involve a few different Azure services. I'll need to read the question closely and consider the business requirements.
SH
Shawna 1 year ago
This looks like a straightforward security configuration question. I'll review the requirements carefully and think through the options.
LI
Lili 1 year ago
Option A all the way! Azure DDoS Protection Standard is a must-have for any serious landing zone security setup.
ST
Staci 1 year ago
↳ replying to Lili
I agree, Microsoft Defender for Cloud is also a good option for meeting the security requirements.
AL
Alise 1 year ago
↳ replying to Lili
C) Microsoft Defender for Cloud
SO
Sommer 1 year ago
↳ replying to Lili
Definitely! Azure DDoS Protection Standard is essential for securing the landing zones.
BU
Buddy 1 year ago
↳ replying to Lili
A) Azure DDoS Protection Standard
SU
Sue 1 year ago
I believe Microsoft Defender for Cloud should also be configured to enhance security in the landing zones.
MO
Mohammad 1 year ago
I agree with Beatriz. Azure DDoS Protection Standard will help meet the security requirements.
AL
Aleisha 1 year ago
Haha, I'm going with option D. An ExpressRoute gateway? That's like bringing a bazooka to a knife fight!
DE
Denny 1 year ago
↳ replying to Aleisha
Yeah, option D, an ExpressRoute gateway, might be a bit overkill for securing the landing zones.
DE
Delsie 1 year ago
↳ replying to Aleisha
I agree, Azure DDoS Protection Standard is a strong solution for protecting against DDoS attacks.
KA
Karl 1 year ago
↳ replying to Aleisha
I think option A, Azure DDoS Protection Standard, would be a better choice for securing the landing zones.
BE
Beatriz 2 years ago
I think we should configure Azure DDoS Protection Standard for each landing zone.
CO
Cortney 2 years ago
I think option B is the way to go. An Azure Private DNS zone will help keep the landing zones secure and private.
CY
Cyril 1 year ago
↳ replying to Cortney
Yes, combining Azure Private DNS zone with Microsoft Defender for Cloud would provide a strong security solution for the landing zones.
LI
Lisha 1 year ago
↳ replying to Cortney
We should also consider implementing Microsoft Defender for Cloud for additional security measures.
HE
Herminia 1 year ago
↳ replying to Cortney
I agree, using Azure Private DNS zone will definitely help meet the security requirements.
BE
Ben 1 year ago
↳ replying to Cortney
Option B) an Azure Private DNS zone is a good choice for securing the landing zones.
GO
Goldie 2 years ago
Option C looks good to me. Microsoft Defender for Cloud can provide comprehensive security for the landing zones.
LA
Lashunda 1 year ago
↳ replying to Goldie
I agree, Microsoft Defender for Cloud is a great choice to meet both the landing zone and business requirements.
RU
Rupert 1 year ago
↳ replying to Goldie
Option C looks good to me. Microsoft Defender for Cloud can provide comprehensive security for the landing zones.
0/2000 characters

Save Cancel