logo
Exam overview and study plan

SC-100 Practice Questions

Cybersecurity Architect

Read questions, check verified answers and discuss the reasoning. Use reading options to shape your revision, or switch to the simulator for timed practice.

View 133 free questions

133 questions in this view

Page 1 of 23

Question 1

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

 

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

 

You are designing the encryption standards for data at rest for an Azure resource.

 

You need to provide recommendations to ensure that the data at rest is encrypted by using AES-256 keys. The solution must support rotating the encryption keys monthly.

Solution: For blob containers in Azure Storage, you recommend encryption that uses customer-managed keys (CMKs).

 

Does this meet the goal?

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 2

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

 

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

 

You are designing the encryption standards for data at rest for an Azure resource.

 

You need to provide recommendations to ensure that the data at rest is encrypted by using AES-256 keys. The solution must support rotating the encryption keys monthly.

Solution: For Azure SQL databases, you recommend Transparent Data Encryption (TDE) that uses customer-managed keys (CMKs).

 

Does this meet the goal?

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 3

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

 

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

 

You are designing the encryption standards for data at rest for an Azure resource.

 

You need to provide recommendations to ensure that the data at rest is encrypted by using AES-256 keys. The solution must support rotating the encryption keys monthly.

Solution: For Azure SQL databases, you recommend Transparent Data Encryption (TDE) that uses Microsoft-managed keys.

 

Does this meet the goal?

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 4

You have an Azure subscription.

 

You plan to deploy Azure Kubernetes Service (AKS) clusters that will be used to host web services.

 

You need to recommend an ingress controller solution that will protect the hosted web services.

 

What should you include in the recommendation?

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 5

You have an Azure subscription that has Microsoft Defender for Cloud enabled.

 

You are evaluating the Microsoft cloud security benchmark report as shown in the following exhibit.

Microsoft cloud security benchmark Microsoft cloud security benchmark is applied to 3 subscriptions Expand all compliance controls: Not selected NS. Network Security – not passing IM. Identity Management – not passing PA. Privileged Access – not passing DP. Data Protection – not passing AM. Asset Management – passing LT. Logging and Threat Detection – not passing IR. Incident Response – not passing PV. Posture and Vulnerability Management – not passing ES. Endpoint Security – not passing BR. Backup and Recovery – not passing DS. DevOps Security – passing GS. Governance and Strategy - not available

You need to verify whether Microsoft Defender for Servers is deployed and available to all virtual machines that run Windows.

 

Which compliance control should you evaluate?

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 6

You have on-premises servers that run Linux and host a legacy database named DB1. DB1 is managed by using a local web-based administration tool.

 

You have an Azure subscription. The subscription is linked to a Microsoft Entra tenant that has a Microsoft Entra ID P1 license.

 

You need to ensure that remote users can manage DB1. The solution must meet the following requirements:

 

  • The users must authenticate by using their Microsoft Entra credentials.
  • The users must be able to access the web-based administration tool for DB1 only.
  • User access must be reevaluated continuously and revoked based on risk signals.
  • Costs must be minimized.

 

What should you include in the solution?

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.