MENU
You have an on-premises network and a Microsoft 365 subscription.
You are designing a Zero Trust security strategy.
Which two security controls should you include as part of the Zero Trust solution? Each correct answer part of the solution.
NOTE: Each correct answer is worth one point.
Suggested Answer: A, D
Get Premium SC-100 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
11 comments · newest first
CA
Camellia
11 months ago
Blocking unknown locations is smart, but I’m not sold on C.
LA
Lauran
11 months ago
A is a must, but I think D is also crucial for compliance.
JA
Jaime
11 months ago
Surprised that C is even an option, why disable passwordless?
RO
Rosina
11 months ago
I disagree with B, always allowing on-prem connections is risky.
KA
Katina
12 months ago
Definitely A and D! Those are key for Zero Trust.
LA
Lavonda
12 months ago
Disabling passwordless sign-in for sensitive accounts sounds like a good idea, but I wonder if that would make things less convenient for users.
DA
Dalene
1 year ago
I feel like always allowing connections from the on-premises network contradicts the Zero Trust model, but I can't recall the exact reasoning behind it.
ID
Idella
1 year ago
I remember a practice question where we discussed blocking access from noncompliant devices. That seems really important for Zero Trust, right?
JE
Jess
1 year ago
I think blocking sign-in attempts from unknown locations is definitely a key part of Zero Trust, but I'm not sure about the second option.
CA
Carolynn
1 year ago
This looks like a straightforward question about verifying the status of a service. I'd start by checking the system tray for the Server Protect icon, that seems like the easiest way to confirm the service is running.
SA
Santos
1 year ago
This is a tricky one, but I think I can figure it out. I'll start by analyzing the code and the class definitions, then I'll carefully consider each expression to determine which ones are True.