Free SC-100 Mock Exam – Practice Online Confidently

A customer has a hybrid cloud infrastructure that contains a Microsoft 365 E5 subscription and an

Azure subscription.

All the on-premises servers in the perimeter network are prevented from connecting directly to the

internet.

The customer recently recovered from a ransomware attack.

The customer plans to deploy Microsoft Sentinel.

You need to recommend configurations to meet the following requirements:

Ensure that the security operations team can access the security logs and the operation logs.

Ensure that the IT operations team can access only the operations logs, including the event logs of

the servers in the perimeter network.

Which two configurations can you include in the recommendation? Each correct answer presents a

complete solution. NOTE: Each correct selection is worth one point. 

You have legacy operational technology (OT) devices and loT devices.

You need to recommend best practices for applying Zero Trust principles to the OT and loT devices

based on the Microsoft Cybersecurity Reference Architectures (MCRA). The solution must minimize

the risk of disrupting business operations.

Which two security methodologies should you include in the recommendation? Each correct answer

presents part of the solution.

NOTE: Each correct selection is worth one point 

You need to recommend a solution to resolve the virtual machine issue. What should you include in the recommendation? (Choose Two)

You have an Azure AD tenant that contains 10 Windows 11 devices and two groups named Group1

and Group2. The Windows 11 devices are joined to the Azure AD tenant and are managed by using

Microsoft Intune.

You are designing a privileged access strategy based on the rapid modernization plan (RaMP). The

strategy will include the following configurations:

Each user in Group1 will be assigned a Windows 11 device that will be configured as a privileged

access device.

The Security Administrator role will be mapped to the privileged access security level.

The users in Group1 will be assigned the Security Administrator role.

The users in Group2 will manage the privileged access devices.

You need to configure the local Administrators group for each privileged access device. The solution

must follow the principle of least privilege.

What should you include in the solution? 

You have an Azure subscription

You plan to deploy multiple containerized microservice-based apps to Azure Kubemetes Service

(AKS)

You need to recommend a solution that meets the following requirements:

Manages secrets

Provides encryption

Secures service-to-service communication by using mTLS encryption

Minimizes administrative effort

What should you include in the recommendation?