Free SC-100 Mock Exam – Practice Online Confidently

You need to recommend a solution to resolve the virtual machine issue. What should you include in the recommendation? (Choose Two)

You have a Microsoft 365 subscription and an Azure subscription. Microsoft 365 Defender and

Microsoft Defender for Cloud are enabled.

The Azure subscription contains 50 virtual machines. Each virtual machine runs different applications

on Windows Server 2019.

You need to recommend a solution to ensure that only authorized applications can run on the virtual

machines. If an unauthorized application attempts to run or be installed, the application must be

blocked automatically until an administrator authorizes the application.

Which security control should you recommend? 

Your company develops several applications that are accessed as custom enterprise applications in Azure Active Directory (Azure AD). You need to recommend a solution to prevent users on a specific list of countries from connecting to the applications. What should you include in the recommendation?

A customer has a hybrid cloud infrastructure that contains a Microsoft 365 E5 subscription and an

Azure subscription.

All the on-premises servers in the perimeter network are prevented from connecting directly to the

internet.

The customer recently recovered from a ransomware attack.

The customer plans to deploy Microsoft Sentinel.

You need to recommend configurations to meet the following requirements:

Ensure that the security operations team can access the security logs and the operation logs.

Ensure that the IT operations team can access only the operations logs, including the event logs of

the servers in the perimeter network.

Which two configurations can you include in the recommendation? Each correct answer presents a

complete solution. NOTE: Each correct selection is worth one point. 

Your on-premises network contains an e-commerce web app that was developed in Angular and

Node.js. The web app uses a MongoDB database. You plan to migrate the web app to Azure. The

solution architecture team proposes the following architecture as an Azure landing zone. 

You need to provide recommendations to secure the connection between the web app and the

database. The solution must follow the Zero Trust model.

Solution: You recommend implementing Azure Front Door with Azure Web Application Firewall

(WAF).

Does this meet the goal?