Online Access Free SC-100 Practice Test

You have a Microsoft 365 subscription that contains a Microsoft SharePoint Online site named Site1. Site1 stores documents that are based on a predefined form and include confidential employee information.
You monitor access to Site1 by using a Microsoft Defender for Cloud Apps session policy.
You need to ensure that step-up authentication is triggered when a user downloads documents that are based on the predefined form. The solution must minimize administrative effort.
Which Microsoft Data Classification Service inspection method should you use, and which Conditional Access option should you add to the session policy? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Correct Answer:

Explanation:

You are designing a security strategy for providing access to Azure App Service web apps through an Azure Front Door instance.
You need to recommend a solution to ensure that the web apps only allow access through the Front Door instance.
Solution: You recommend access restrictions to allow traffic from the backend IP address of the Front Door instance.
Does this meet the goal?

• A.No
• B.Yes

Your company has a Microsoft 365 E5 subscription.
The company plans to deploy 45 mobile self-service kiosks that will run Windows 10. You need to provide recommendations to secure the kiosks. The solution must meet the following requirements:
* Ensure that only authorized applications can run on the kiosks.
* Regularly harden the kiosks against new threats.
Which two actions should you include in the recommendations? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

• A.Implement threat and vulnerability management in Microsoft Defender for Endpoint.
• B.Onboard the kiosks to Azure Monitor.
• C.Implement Automated Investigation and Remediation (AIR) in Microsoft Defender for Endpoint.
• D.Onboard the kiosks to Microsoft Intune and Microsoft Defender for Endpoint.
• E.Implement Privileged Access Workstation (PAW) for the kiosks.

You have Windows 11 devices and Microsoft 365 E5 licenses.
You need to recommend a solution to prevent users from accessing websites that contain adult content such as gambling sites. What should you include in the recommendation?

• A.Microsoft Defender for Endpoint
• B.Compliance Manager
• C.Microsoft Defender for Cloud Apps
• D.Microsoft Endpoint Manager

Your company has the virtual machine infrastructure shown in the following table.

The company plans to use Microsoft Azure Backup Server (MABS) to back up the virtual machines to Azure.
You need to provide recommendations to increase the resiliency of the backup strategy to mitigate attacks such as ransomware.
What should you include in the recommendation?

• A.Require PINs to disable backups.
• B.Use geo-redundant storage (GRS).
• C.Use customer-managed keys (CMKs) for encryption.
• D.Implement Azure Site Recovery replication.