SC-100 無料問題集「Microsoft Cybersecurity Architect」
A customer is deploying Docker images to 10 Azure Kubernetes Service (AKS) resources across four Azure subscriptions. You are evaluating the security posture of the customer.
You discover that the AKS resources are excluded from the secure score recommendations. You need to produce accurate recommendations and update the secure score.
Which two actions should you recommend in Microsoft Defender for Cloud? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.
You discover that the AKS resources are excluded from the secure score recommendations. You need to produce accurate recommendations and update the secure score.
Which two actions should you recommend in Microsoft Defender for Cloud? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.
正解：A、D
解答を投票する
You have an Azure subscription.
You have a Microsoft 365 subscription.
You need to assess regulatory compliance of the subscriptions. The solution must meet the following requirements:
* Identify whether data stored in Azure and Microsoft 365 complies with General Data Protection Regulation (GDPR) regulations.
* Identify whether Azure resources comply with National Institute of Standards and Technology (NIST) standards.
* Provide recommendations on controls to improve compliance.
What should you use? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
You have a Microsoft 365 subscription.
You need to assess regulatory compliance of the subscriptions. The solution must meet the following requirements:
* Identify whether data stored in Azure and Microsoft 365 complies with General Data Protection Regulation (GDPR) regulations.
* Identify whether Azure resources comply with National Institute of Standards and Technology (NIST) standards.
* Provide recommendations on controls to improve compliance.
What should you use? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
正解：
Explanation:
You have a Microsoft 365 subscription.
You need to design a solution to block file downloads from Microsoft SharePoint Online by authenticated users on unmanaged devices.
Which two services should you include in the solution? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
You need to design a solution to block file downloads from Microsoft SharePoint Online by authenticated users on unmanaged devices.
Which two services should you include in the solution? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
正解：A、B
解答を投票する
You have a Microsoft 365 ES subscription. The subscription contains 500 devices that run Windows 11 Pro and are enrolled in Microsoft Intune You need to evaluate the use of Microsoft Defender Vulnerability Management to provide recommended configuration changes for the devices. Which Endpoint security settings should you use to review the recommended changes?
正解：A
解答を投票する
Your company plans to follow DevSecOps best practices of the Microsoft Cloud Adoption Framework for Azure to integrate DevSecOps processes into continuous integration and continuous deployment (Cl/CD) DevOps pipelines You need to recommend which security-related tasks to integrate into each stage of the DevOps pipelines.
What should recommend? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
What should recommend? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
正解：
Explanation:
Your company wants to optimize using Microsoft Defender for Endpoint to protect its resources against ransomware based on Microsoft Security Best Practices.
You need to prepare a post-breach response plan for compromised computers based on the Microsoft Detection and Response Team (DART) approach in Microsoft Security Best Practices.
What should you include in the response plan?
You need to prepare a post-breach response plan for compromised computers based on the Microsoft Detection and Response Team (DART) approach in Microsoft Security Best Practices.
What should you include in the response plan?
正解：D
解答を投票する
You have a Microsoft 365 subscription that contains 1,000 users and a group named Group1. All the users have Windows 11 devices. The users sign in to their devices by using their Microsoft Entra account. The users do NOT have administrative rights to their devices.
The members of Group1 remotely assist the users by taking control of user sessions. The remote control sessions run in the security context of the users they are assisting.
You need to recommend a solution that will enable the Group1 members to run apps that require administrative rights to the users ' devices. The solution must ensure that the apps are run in the context of each signed-in standard user.
What should you include in the recommendation?
The members of Group1 remotely assist the users by taking control of user sessions. The remote control sessions run in the security context of the users they are assisting.
You need to recommend a solution that will enable the Group1 members to run apps that require administrative rights to the users ' devices. The solution must ensure that the apps are run in the context of each signed-in standard user.
What should you include in the recommendation?
正解：C
解答を投票する
You have a Microsoft Entra tenant named contoso.com that is linked to an Azure subscription named Sub!
and a Microsoft 365 subscription. Sub! contains a publicly accessible Azure App Service web app named App1.
You have an external partner that has a Microsoft Entra tenant named fabrikam.com.
You need to recommend a solution that meets the following requirements:
* Ensures that the users in fabrikam.com can be granted permissions to specific Microsoft Teams channels in contoso.com
* Ensures that the users of App1 can authenticate by using social media accounts
* Minimizes administrative effort
Which authentication method should you recommend for each requirement? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
and a Microsoft 365 subscription. Sub! contains a publicly accessible Azure App Service web app named App1.
You have an external partner that has a Microsoft Entra tenant named fabrikam.com.
You need to recommend a solution that meets the following requirements:
* Ensures that the users in fabrikam.com can be granted permissions to specific Microsoft Teams channels in contoso.com
* Ensures that the users of App1 can authenticate by using social media accounts
* Minimizes administrative effort
Which authentication method should you recommend for each requirement? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
正解：
Explanation:
Your company is designing an application architecture for Azure App Service Environment (ASE) web apps as shown in the exhibit. (Click the Exhibit tab.) Communication between the on-premises network and Azure uses an ExpressRoute connection.
You need to recommend a solution to ensure that the web apps can communicate with the on-premises application server. The solution must minimize the number of public IP addresses that are allowed to access the on-premises network.
What should you include in the recommendation?
You need to recommend a solution to ensure that the web apps can communicate with the on-premises application server. The solution must minimize the number of public IP addresses that are allowed to access the on-premises network.
What should you include in the recommendation?
正解：A
解答を投票する
You have an operational model based on the Microsoft Cloud Adoption framework for Azure.
You need to recommend a solution that focuses on cloud-centric control areas to protect resources such as endpoints, database, files, and storage accounts.
What should you include in the recommendation?
You need to recommend a solution that focuses on cloud-centric control areas to protect resources such as endpoints, database, files, and storage accounts.
What should you include in the recommendation?
正解：C
解答を投票する
You have multiple on-premises Hyper-V hosts that contain virtual machines. The virtual machines run Windows Server.
You have an Azure subscription
You need to recommend a solution to collect Security event logs from the virtual machines by using Microsoft Sentinel. The solution must meet the following requirements:
* Leverage the Windows Security Events via AMA data connector.
* Ensure that only specific events are collected.
* Minimize costs.
What should you recommend? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
You have an Azure subscription
You need to recommend a solution to collect Security event logs from the virtual machines by using Microsoft Sentinel. The solution must meet the following requirements:
* Leverage the Windows Security Events via AMA data connector.
* Ensure that only specific events are collected.
* Minimize costs.
What should you recommend? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
正解：
Explanation:
