Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

Microsoft SC-100 Exam - Topic 5 Question 25 Discussion

Actual exam question for Microsoft's SC-100 exam
Question #: 25
Topic #: 5
[All SC-100 Questions]

You have an on-premises network and a Microsoft 365 subscription.

You are designing a Zero Trust security strategy.

Which two security controls should you include as part of the Zero Trust solution? Each correct answer part of the solution.

NOTE: Each correct answer is worth one point.

Show Suggested Answer Hide Answer
Suggested Answer: A, D

Contribute your Thoughts:

0/2000 characters
Camellia
4 months ago
Blocking unknown locations is smart, but I’m not sold on C.
upvoted 0 times
...
Lauran
4 months ago
A is a must, but I think D is also crucial for compliance.
upvoted 0 times
...
Jaime
4 months ago
Surprised that C is even an option, why disable passwordless?
upvoted 0 times
...
Rosina
5 months ago
I disagree with B, always allowing on-prem connections is risky.
upvoted 0 times
...
Katina
5 months ago
Definitely A and D! Those are key for Zero Trust.
upvoted 0 times
...
Lavonda
5 months ago
Disabling passwordless sign-in for sensitive accounts sounds like a good idea, but I wonder if that would make things less convenient for users.
upvoted 0 times
...
Dalene
5 months ago
I feel like always allowing connections from the on-premises network contradicts the Zero Trust model, but I can't recall the exact reasoning behind it.
upvoted 0 times
...
Idella
5 months ago
I remember a practice question where we discussed blocking access from noncompliant devices. That seems really important for Zero Trust, right?
upvoted 0 times
...
Jess
6 months ago
I think blocking sign-in attempts from unknown locations is definitely a key part of Zero Trust, but I'm not sure about the second option.
upvoted 0 times
...
Carolynn
6 months ago
This looks like a straightforward question about verifying the status of a service. I'd start by checking the system tray for the Server Protect icon, that seems like the easiest way to confirm the service is running.
upvoted 0 times
...
Santos
6 months ago
This is a tricky one, but I think I can figure it out. I'll start by analyzing the code and the class definitions, then I'll carefully consider each expression to determine which ones are True.
upvoted 0 times
...

Save Cancel