Celebrate 2025 with Discount Offer - Coupon code:

Microsoft SC-100 Exam Questions

Certification Exams

Downloadable PDF versions

100% Confidential

Updated Regularly

Advanced Features

Number Of Questions: 176

$59.00

Exam Details

Exam Name:

Microsoft Cybersecurity Architect

Exam Code:

SC-100

Total Questions in Exam:

176

Demo Questions

Q1. You have an Azure subscription You plan to deploy multiple containerized microservice-based apps to Azure Kubemetes Service (AKS) You need to recommend a solution that meets the following requirements: * Manages secrets * Provides encryption * Secures service-to-service communication by using mTLS encryption * Minimizes administrative effort What should you include in the recommendation?

A.Flux

B. Envoy

C. Dapr

D. Istio

Correct Answer: D

Q2. You have an on-premises server that runs Windows Server and contains a Microsoft SQL Server database named DB1. You plan to migrate DB1 to Azure. You need to recommend an encrypted Azure database solution that meets the following requirements: * Minimizes the risks of malware that uses elevated privileges to access sensitive data * Prevents database administrators from accessing sensitive data * Enables pattern matching for server-side database operations * Supports Microsoft Azure Attestation * Uses hardware-based encryption What should you include in the recommendation?

A.SQL Server on Azure Virtual Machines with virtualization-based security (VBS) enclaves

B. Azure SQL Database with virtualization-based security (VBS) enclaves

C. Azure SQL Managed Instance that has Always Encrypted configured

D. Azure SQL Database with Intel Software Guard Extensions (Intel SGX) enclaves

Correct Answer: D

Q3. Your company has an Azure subscription that has enhanced security enabled for Microsoft Defender for Cloud. The company signs a contract with the United States government. You need to review the current subscription for NIST 800-53 compliance. What should you do first?

A.From Defender for Cloud, review the secure score recommendations.

B. From Microsoft Sentinel, configure the Microsoft Defender for Cloud data connector.

C. From Defender for Cloud, review the Azure security baseline for audit report.

D. From Defender for Cloud, add a regulatory compliance standard.

Correct Answer: D

Q4. You plan to deploy 20 Azure Kubernetes Service (AKS) clusters. The cluster configuration will be managed declaratively by using Kubernetes manifest files stored in Azure Repos. You need to recommend a solution to ensure that the configuration of all the clusters remains consistent by using the manifest files stored in Azure Repos. What should you include in the recommendation?

A.Gatekeeper

B. Dependency Tracker

C. Dependency

D. Flux

Correct Answer: D

Q5. You have an Azure AD tenant that syncs with an Active Directory Domain Services (AD DS) domain. You are designing an Azure DevOps solution to deploy applications to an Azure subscription by using continuous integration and continuous deployment (CI/CD) pipelines. You need to recommend which types of identities to use for the deployment credentials of the service connection. The solution must follow DevSecOps best practices from the Microsoft Cloud Adoption Framework for Azure. What should you recommend?

A.an Azure AD user account that has a password stored in Azure Key Vault

B. a group managed service account (gMSA)

C. an Azure AD user account that has role assignments in Azure AD Privileged Identity Management {PIM)

D. a managed identity in Azure

Correct Answer: D

$59.00

Reviews

There are no reviews yet.

Be the first to review “Microsoft SC-100 Exam Questions”

Your email address will not be published. Required fields are marked *