SC-100

You have a Microsoft 365 ES subscription.
You plan to enhance privacy management in the working environment.
You need to recommend a solution to enhance the privacy management. The solution must meet the following requirements:
✑ Identify unused personal data and empower users to make smart data handling decisions.
✑ Provide users with notifications and guidance when a user sends personal data in Microsoft Teams.
✑ Provide users with recommendations to mitigate privacy risks.
What should you include in the recommendation?

• communication compliance in insider risk management

• Microsoft Viva Insights

• Privacy Risk Management in Microsoft Priva

• Advanced eDiscovery

You have Microsoft Defender for Cloud enabled.
Suspicious authentication activity alerts have been appearing in the Workload protections dashboard.
You need to recommend a solution to evaluate and remediate the alerts by using workflow automation. The solution must minimize development effort.
What should you recommend?

• Azure Monitor webhooks

• Azure Event Hubs

• Azure Functions apps

• Azure Logics Apps

You have a Microsoft 365 E5 subscription.

You need to recommend a solution to efficiently assign user account management tasks to manage cloud resources. The solution must meet the following requirements:

• Support the use of Microsoft Entra Privileged Identity Management (PIM).

• Support access reviews.

What should you include in the recommendation?

• Azure management groups

• Azure resource groups

• Microsoft Entra roles

• 
  Organizational units

Your company is moving all on-premises workloads to Azure and Microsoft 365.
You need to design a security orchestration, automation, and response (SOAR) strategy in Microsoft Sentinel that meets the following requirements:
✑ Minimizes manual intervention by security operation analysts
✑ Supports triaging alerts within Microsoft Teams channels
What should you include in the strategy?

• KQL

• Playbook

• data connector

• workbook

You have a multi-cloud infrastructure that contains an Azure subscription and an Amazon Web Services (AWS) account.

You plan to implement Microsoft Defender for Cloud and enable the following capabilities:

• Attack path analysis

• Security governance

• Multicloud coverage

• Cloud security explorer

• Centralized policy management

Which two capabilities are included for free in the Foundational cloud security posture management (CSPM) plan? Each correct answer presents part of the solution.

• attack path analysis

• Centralized policy management

• 
  cloud security explorer

• Multicloud coverage

• Security governance

You have a customer that has a Microsoft 365 subscription and uses the Free edition of Azure Active Directory (Azure AD).
The customer plans to obtain an Azure subscription and provision several Azure resources.
You need to evaluate the customer's security environment.
What will necessitate an upgrade from the Azure AD Free edition to the Premium edition?

• Azure AD Privileged Identity Management (PIM)

• role-based authorization

• resource-based authorization

• Azure AD Multi-Factor Authentication

You have a Microsoft 365 E5 license and an Azure subscription.

You have devices that run either Windows, Android, iOS/iPadOS, or macOS. The Windows devices are Microsoft Entra joined.

You need to design a security solution to meet the following requirements:

• Control device features.

• Validate the compliance health of the devices.

• Remotely lock, restart, locate, or restore a device to factory settings.

What should you include in the solution?

• 
  Microsoft Defender for Endpoint

• 
  Microsoft Entra Lifecycle Workflows

• Microsoft Intune

• Windows Autopilot

You have below on-premises servers that run Windows Server:

• One domain controllers in an Active Directory Domain Services (AD DS) domain
• Two application servers named Server1 and Server2 that run ASP.NET web apps
• A VPN server named Served that authenticates by using RADIUS and AD DS

End users use a VPN to access the web apps over the internet.

You need to redesign a user access solution to increase the security of the connections to the web apps. The solution must minimize the attack surface and follow the Zero Trust principles of MCRA.

What should you include in the recommendation?

• Publish the web apps by using Azure AD Application Proxy.

• Configure the VPN to use Azure AD authentication.

• Configure connectors and rules in Microsoft Defender for Cloud Apps

• Configure web protection in Microsoft Defender for Endpoint.

Your company has an Azure subscription that has enhanced security enabled for Microsoft Defender for Cloud.
The company signs a contract with the United States government.
You need to review the current subscription for NIST 800-53 compliance.
What should you do first?

• From Azure Policy, assign a built-in initiative that has a scope of the subscription.

• From Microsoft Sentinel, configure the Microsoft Defender for Cloud data connector.

• From Defender for Cloud, review the Azure security baseline for audit report.

• From Microsoft Defender for Cloud Apps, create an access policy for cloud applications.

Your company has a multi-cloud environment that contains a Microsoft 365 subscription, an Azure subscription, and Amazon Web Services (AWS) implementation.
You need to recommend a security posture management solution for the following components:
✑ Azure IoT Edge devices

Which services should you include in the recommendation?

• Azure Arc

• Defender for IoT

• Defender for Cloud Apps

• Defender for Enpoint