Free Preparation Discussions
MENU
Microsoft SC-100 Exam Questions
- Topic 1: Design solutions that align with security best practices and priorities: It covers how to design a strategy of resiliency for ransomware and other attacks based on practices of Microsoft Security. The topic also focuses on designing solutions that align with the Microsoft Cybersecurity Reference Architectures (MCRA) and Microsoft Cloud Security Benchmark (MCSB). Lastly, it delves into designing such solutions that align with the Microsoft Cloud Adoption Framework for Azure and the Microsoft Azure Well-Architected Framework.
- Topic 2: Design security operations, identity, and compliance capabilities: This topic covers sub-topics related to designing solutions for security operations, identity and access management, securing privileged access, and regulatory compliance.
- Topic 3: Design security solutions for infrastructure: It measures your knowledge of designing solutions for the management of security posture in hybrid and multi cloud environments. Moreover, it also focuses on designing such solutions which are required to secure server and client endpoints. Lastly, it covers how to specify certain needs to secure SaaS, PaaS, and IaaS services.
- Topic 4: Design security solutions for applications and data: Focal points of this topic is designing solutions for securing Microsoft 365, securing applications, and securing an organization's data.
Free Microsoft SC-100 Exam Actual Questions
Note: Premium Questions for SC-100 were last updated On Apr. 23, 2025 (see below)
You need to recommend a solution for securing the landing zones. The solution must meet the landing zone requirements and the business requirements.
What should you configure for each landing zone?
One of the stipulations is to meet the business requirements of minimizing costs. ExpressRoute is expensive.
Given the landing zone requirements of
1) 'Use a DNS namespace of litware.com'
2) 'Ensure that the Azure virtual machines in each landing zone communicate with Azure App Service web apps in the same zone over the Microsoft backbone network, rather than over public endpoints'
Your on-premises network contains an Active Directory Domain Services (AD DS) domain named corpxontoso.com and an AD DS-integrated application named App1.
Your perimeter network contains a server named Server1 that runs Windows Server.
You have a Microsoft Entra tenant named contoso.com that syncs with corp.contoso.com.
You plan to implement a security solution that will include the following configurations:
* Manage access to App1 by using Microsoft Entra Private Access.
* Deploy a Microsoft Entra application proxy connector to Server1.
* Implement single sign-on (SSO) for App1 by using Kerberos constrained delegation.
* For Server1, configure the following rules in Windows Defender Firewall with Advanced Security:
o Rule1: Allow TCP 443 inbound from a designated set of Azure URLs.
o Rule2: Allow TCP 443 outbound to a designated set of Azure URLs.
o Rule3: Allow TCP 80 outbound to a designated set of Azure URLs.
o Rule4: Allow TCP 389 outbound to the domain controllers on corp.contoso.com.
You need to maximize security for the planned implementation. The solution must minimize the impact on the connector.
Which rule should you remove?
You have to Azure subscriptions that contain 100 role-based access control (RBAC) role assignments.
You plan to consolidate the role assignments.
You need to recommend a solution to identify which role assignments were NOT used during the last 90 days. The solution must minimize administrative effort.
What should you include in the recommendation?
You have a Microsoft Entra tenant named contoso.com and use Microsoft Intune. Each user in contoso.com has a Microsoft Entra ID P1 license and a Windows 11 device that has the Global Secure Access client deployed.
You plan to deploy the following configuration of Microsoft Entra Internet Access:
* Enable a baseline profile.
* Create a security profile named Profile` that has a priority of 300 and contains a single web content filtering policy named WCFPolicy configure WCFPolicy1 as follows:
o Set Action to allow.
o Include a single rule that has a fully qualified domain name (FQDN) destination of '. adatum.com.
* Link Profile1 to a Conditional Access policy named CAPolicy1, apply CAPolicy1 to all users, and grant access unless a user's device is noncompliant
You need to evaluate the impact of the planned deployment on traffic to the following resources:
* https://www.adatum.com:8433
* https://www.fabrikam.com
Which two traffic scenarios will occur? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point
You have an on-premises server that runs Windows Server and contains a Microsoft SQL Server database named DB1.
You plan to migrate DB1 to Azure.
You need to recommend an encrypted Azure database solution that meets the following requirements:
* Minimizes the risks of malware that uses elevated privileges to access sensitive data
* Prevents database administrators from accessing sensitive data
* Enables pattern matching for server-side database operations
* Supports Microsoft Azure Attestation
* Uses hardware-based encryption
What should you include in the recommendation?
- Select Question Types you want
- Set your Desired Pass Percentage
- Allocate Time (Hours : Minutes)
- Create Multiple Practice tests with Limited Questions
- Customer Support
Caitlin
28 days agoRolande
29 days agoDestiny
1 months agoNiesha
2 months agoVi
2 months agoBrunilda
2 months agoIvette
3 months agoFelicidad
3 months agoWilliam
3 months agoMi
3 months agoLenna
4 months agoTerrilyn
4 months agoSherita
4 months agoKimberlie
4 months agoRolland
4 months agoRegenia
5 months agoLisbeth
5 months agoLaquanda
5 months agoIrene
5 months agoWei
5 months agoTammara
6 months agoVivan
6 months agoLuann
6 months agoChana
6 months agoKenneth
6 months agoCassi
7 months agoLonny
7 months agoGilma
7 months agoMargot
7 months agoLizbeth
8 months agoJaclyn
8 months agoIvette
8 months agoBritt
9 months agoTaryn
9 months agoValene
10 months agoBette
10 months agoRory
10 months agoKimberely
10 months agoDelpha
10 months agoHeike
10 months agoVincent
10 months agoNoelia
11 months ago