Free Microsoft SC-100 Exam Questions
Absolute Free SC-100 Exam Practice for Comprehensive Preparation
-
Microsoft SC-100 Exam Questions
-
Provided By: Microsoft
- Exam: Microsoft Cybersecurity Architect
- Certification: Microsoft Certified Cybersecurity Architect Expert
-
Total Questions: 201
-
Updated On: Mar 25, 2025
-
Rated: 4.9 |
-
Online Users: 402
-
Question 1
-
Your company is developing a modern application that will run as an Azure App Service web app. You
plan to perform threat modeling to identify potential security issues by using the Microsoft Threat
Modeling Tool. Which type of diagram should you create?
Answer: A
-
Your company is developing a modern application that will run as an Azure App Service web app. You
plan to perform threat modeling to identify potential security issues by using the Microsoft Threat
Modeling Tool. Which type of diagram should you create?
-
Question 2
-
Your company has a main office and 10 branch offices. Each branch office contains an on-premisesfile server that runs Windows Server and multiple devices that run either Windows 11 or macOS. Thedevices are enrolled in Microsoft Intune.You have a Microsoft Entra tenant.You need to deploy Global Secure Access to implement web filtering for device traffic to the internetThe solution must ensure that all the web traffic from the devices in the branch offices is controlledby using Global Secure Access.What should you do first in each branch office?
Answer: B
-
Your company has a main office and 10 branch offices. Each branch office contains an on-premisesfile server that runs Windows Server and multiple devices that run either Windows 11 or macOS. Thedevices are enrolled in Microsoft Intune.You have a Microsoft Entra tenant.You need to deploy Global Secure Access to implement web filtering for device traffic to the internetThe solution must ensure that all the web traffic from the devices in the branch offices is controlledby using Global Secure Access.What should you do first in each branch office?
-
Question 3
-
You have an Azure AD tenant that contains 10 Windows 11 devices and two groups named Group1and Group2. The Windows 11 devices are joined to the Azure AD tenant and are managed by usingMicrosoft Intune.You are designing a privileged access strategy based on the rapid modernization plan (RaMP). Thestrategy will include the following configurations:Each user in Group1 will be assigned a Windows 11 device that will be configured as a privilegedaccess device.The Security Administrator role will be mapped to the privileged access security level.The users in Group1 will be assigned the Security Administrator role.The users in Group2 will manage the privileged access devices.You need to configure the local Administrators group for each privileged access device. The solutionmust follow the principle of least privilege.What should you include in the solution?
Answer: B
-
You have an Azure AD tenant that contains 10 Windows 11 devices and two groups named Group1and Group2. The Windows 11 devices are joined to the Azure AD tenant and are managed by usingMicrosoft Intune.You are designing a privileged access strategy based on the rapid modernization plan (RaMP). Thestrategy will include the following configurations:Each user in Group1 will be assigned a Windows 11 device that will be configured as a privilegedaccess device.The Security Administrator role will be mapped to the privileged access security level.The users in Group1 will be assigned the Security Administrator role.The users in Group2 will manage the privileged access devices.You need to configure the local Administrators group for each privileged access device. The solutionmust follow the principle of least privilege.What should you include in the solution?
-
Question 4
-
You are planning the security requirements for Azure Cosmos DB Core (SQL) API accounts. You need
to recommend a solution to audit all users that access the data in the Azure Cosmos DB accounts.
Which two configurations should you include in the recommendation? Each correct answer presents
part of the solution. NOTE: Each correct selection is worth one point.
Answer: B,C
-
You are planning the security requirements for Azure Cosmos DB Core (SQL) API accounts. You need
to recommend a solution to audit all users that access the data in the Azure Cosmos DB accounts.
Which two configurations should you include in the recommendation? Each correct answer presents
part of the solution. NOTE: Each correct selection is worth one point.
-
Question 5
-
You have a Microsoft 365 tenant. Your company uses a third-party software as a service (SaaS) app
named App1. App1 supports authenticating users by using Azure AO credentials. You need to
recommend a solution to enable users to authenticate to App1 by using their Azure AD credentials.
What should you include in the recommendation?
Answer: C
-
You have a Microsoft 365 tenant. Your company uses a third-party software as a service (SaaS) app
named App1. App1 supports authenticating users by using Azure AO credentials. You need to
recommend a solution to enable users to authenticate to App1 by using their Azure AD credentials.
What should you include in the recommendation?