Free SC-100 Exam Braindumps

Pass your Microsoft Cybersecurity Architect exam with these free Questions and Answers

Page 4 of 29
QUESTION 11

- (Exam Topic 3)
Your company has devices that run either Windows 10, Windows 11, or Windows Server. You are in the process of improving the security posture of the devices.
You plan to use security baselines from the Microsoft Security Compliance Toolkit.
What should you recommend using to compare the baselines to the current device configurations?

  1. A. Microsoft Intune
  2. B. Policy Analyzer
  3. C. Local Group Policy Object (LGPO)
  4. D. Windows Autopilot

Correct Answer: B
https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-security-configuration-framework

QUESTION 12

- (Exam Topic 3)
You are designing security for a runbook in an Azure Automation account. The runbook will copy data to Azure Data Lake Storage Gen2.
You need to recommend a solution to secure the components of the copy process.
What should you include in the recommendation for each component? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.
SC-100 dumps exhibit
Solution:
Data Security = Access Keys stored in Azure Key Vault
Network access control = Azure Private Link with network service tags
https://docs.microsoft.com/en-us/azure/automation/automation-security-guidelines#data-security

Does this meet the goal?

  1. A. Yes
  2. B. No

Correct Answer: A

QUESTION 13

- (Exam Topic 3)
You have a Microsoft 365 E5 subscription and an Azure subscripts You need to evaluate the existing environment to increase the overall security posture for the following components:
• Windows 11 devices managed by Microsoft Intune
• Azure Storage accounts
• Azure virtual machines
What should you use to evaluate the components? To answer, select the appropriate options in the answer area.
SC-100 dumps exhibit
Solution:
Selection 1: Microsoft 365 Defender (Microsoft Defender for Endpoint is part of it). Selection 2: Microsoft Defender for Cloud.
Selection 3: Microsoft Defender for Cloud.
https://docs.microsoft.com/en-us/learn/modules/design-strategy-for-secure-paas-iaas-saas-services/8-specify-sec

Does this meet the goal?

  1. A. Yes
  2. B. No

Correct Answer: A

QUESTION 14

- (Exam Topic 3)
Your company has an on-premises network, an Azure subscription, and a Microsoft 365 E5 subscription. The company uses the following devices:
• Computers that run either Windows 10 or Windows 11
• Tablets and phones that run either Android or iOS
You need to recommend a solution to classify and encrypt sensitive Microsoft Office 365 data regardless of where the data is stored. What should you include in the recommendation?

  1. A. eDiscovery
  2. B. retention policies
  3. C. Compliance Manager
  4. D. Microsoft Information Protection

Correct Answer: D
https://docs.microsoft.com/en-us/microsoft-365/compliance/information-protection https://docs.microsoft.com/en-us/microsoft-365/compliance/ediscovery?view=o365-worldwide

QUESTION 15

- (Exam Topic 1)
You need to recommend a solution to meet the requirements for connections to ClaimsDB.
What should you recommend using for each requirement? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
SC-100 dumps exhibit
Solution:
SC-100 dumps exhibit

Does this meet the goal?

  1. A. Yes
  2. B. No

Correct Answer: A

Page 4 of 29

Post your Comments and Discuss Microsoft SC-100 exam with other Community members: