Free SC-100: Microsoft Cybersecurity Architect Exam Questions and Answers

Your company wants to optimize ransomware incident investigations. You need to recommend a plan to investigate ransomware incidents based on the Microsoft Detection and Response Team (DART) approach. Which three actions should you recommend performing in sequence in the plan? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Work out the matching from the exhibit, then reveal.

Correct answer: 1 = Assess the current situation and identify the scope.; 2 = Identify which line-of-business (LOB) apps are unavailable due to a ransomware incident.; 3 = Identify the compromise recovery process.

Your on-premises network contains an e-commerce web app that was developed in Angular and Nodejs. The web app uses a MongoDB database. You plan to migrate the web app to Azure. The solution architecture team proposes the following architecture as an Azure landing zone. You need to provide recommendations to secure the connection between the web app and the database. The solution must follow the Zero Trust model. Solution: You recommend implementing Azure Key Vault to store credentials.

• AA. Yes
• BB. No

You need to recommend a strategy for routing internet-bound traffic from the landing zones. The solution must meet the landing zone requirements. What should you recommend as part of the landing zone deployment?

• AA. service chaining
• BB. local network gateways
• CC. forced tunneling
• DD. a VNet-to-VNet connection

Your on-premises network contains an e-commerce web app that was developed in Angular and Node.js. The web app uses a MongoDB database. You plan to migrate the web app to Azure. The solution architecture team proposes the following architecture as an Azure landing zone. You need to provide recommendations to secure the connection between the web app and the database. The solution must follow the Zero Trust model. Solution: You recommend implementing Azure Front Door with Azure Web Application Firewall (WAF). Does this meet the goal?

• AA. Yes
• BB. No

You are designing the security standards for containerized applications onboarded to Azure. You are evaluating the use of Microsoft Defender for Containers. In which two environments can you use Defender for Containers to scan for known vulnerabilities? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

Select 2 answers.

• AA. Linux containers deployed to Azure Container Registry
• BB. Linux containers deployed to Azure Kubernetes Service (AKS)
• CC. Windows containers deployed to Azure Container Registry
• DD. Windows containers deployed to Azure Kubernetes Service (AKS)
• EE. Linux containers deployed to Azure Container Instances

You are designing a ransomware response plan that follows Microsoft Security Best Practices. You need to recommend a solution to minimize the risk of a ransomware attack encrypting local user files. What should you include in the recommendation?

• AA. Microsoft Defender for Endpoint
• BB. Windows Defender Device Guard
• CC. protected folders
• DD. Azure Files
• EE. BitLocker Drive Encryption (BitLocker)

Your company is preparing for cloud adoption. You are designing security for Azure landing zones. Which two preventative controls can you implement to increase the secure score? Each NOTE: Each correct selection is worth one point.

Select 2 answers.

• AA. Azure Firewall
• BB. Azure Web Application Firewall (WAF)
• CC. Microsoft Defender for Cloud alerts
• DD. Azure Active Directory (Azure AD Privileged Identity Management (PIM)
• EE. Microsoft Sentinel

You have a Microsoft 365 tenant. Your company uses a third-party software as a service (SaaS) app named App1. App1 supports authenticating users by using Azure AD credentials. You need to recommend a solution to enable users to authenticate to App1 by using their Azure AD credentials. What should you include in the recommendation?

• AA. an Azure AD enterprise application
• BB. a relying party trust in Active Directory Federation Services (AD FS)
• CC. Azure AD Application Proxy
• DD. Azure AD B2C

You have a customer that has a Microsoft 365 subscription and an Azure subscription. The customer has devices that run either Windows, iOS, Android, or macOS. The Windows devices are deployed on-premises and in Azure. You need to design a security solution to assess whether all the devices meet the customer's compliance rules. What should you include in the solution?

• AA. Microsoft Information Protection
• BB. Microsoft Defender for Endpoint
• CC. Microsoft Sentinel
• DD. Microsoft Endpoint Manager

For a Microsoft cloud environment, you are designing a security architecture based on the Microsoft Cloud Security Benchmark. What are three best practices for identity management based on the Azure Security Benchmark? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

Select 3 answers.

• AA. Manage application identities securely and automatically.
• BB. Manage the lifecycle of identities and entitlements
• CC. Protect identity and authentication systems.
• DD. Enable threat detection for identity and access management.
• EE. Use a centralized identity and authentication system.