Free SC-100 Mock Exam – Practice Online Confidently

For of an Azure deployment you are designing a security architecture based on the Microsoft Cloud

Security Benchmark. You need to recommend a best practice for implementing service accounts for

Azure API management. What should you include in the recommendation? 

You need to recommend a solution for securing the landing zones. The solution must meet the landing zone requirements and the business requirements. What should you configure for each landing zone?

Your company has a hybrid cloud infrastructure that contains an on-premises Active Directory

Domain Services (AD DS) forest, a Microsoft B65 subscription, and an Azure subscription.

The company's on-premises network contains internal web apps that use Kerberos authentication.

Currently, the web apps are accessible only from the network.

You have remote users who have personal devices that run Windows 11.

You need to recommend a solution to provide the remote users with the ability to access the web

apps. The solution must meet the following requirements:

Prevent the remote users from accessing any other resources on the network.

Support Azure Active Directory (Azure AD) Conditional Access.

Simplify the end-user experience.

What should you include in the recommendation?

You have an Azure subscription that contains multiple Azure Data Lake Storage accounts.

You need to recommend a solution to encrypt the content of the accounts by using service-side

encryption and customer-managed keys. The solution must ensure that individual encryption keys

are applied at the most granular level.

At which level should you recommend the encryption be applied? 

You are designing a ransomware response plan that follows Microsoft Security Best Practices.

You need to recommend a solution to minimize the risk of a ransomware attack encrypting local user

files.

What should you include in the recommendation?