SC-100 試験問題を無料オンラインアクセス

You use Azure Pipelines with Azure Repos to implement continuous integration and continuous deployment (CI/CO) workflows.
You need to recommend best practices to secure the stages of the CI/CD workflows based on the Microsoft Cloud Adoption Framework for Azure.
What should you include in the recommendation for each stage? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

正解：

Explanation:

You have a Microsoft 365 tenant named contoso.com.
You need to ensure that users can authenticate only to contoso.com. The solution must meet the following requirements:
* Prevent the users from authenticating to other Microsoft 365 tenants.
* Minimize administrative effort.
What should you use?

• A.Microsoft Defender for Endpoint
• B.Microsoft Defender for Cloud Apps
• C.Microsoft Entra Internet Access
• D.Microsoft Entra Private Access

You have a Microsoft 365 E5 subscription and an Azure subscription.
You need to recommend a solution to enforce the Zero Trust principle of explicit verification for the subscriptions. The solution must be based on Zero Trust guidance in the Microsoft Cybersecurity Reference Architectures (MCRA).
What should you include in the recommendation?

• A.Microsoft Defender for Cloud
• B.Microsoft Entra ID Identity Governance
• C.Microsoft Defender for Identity
• D.Conditional Access

You are designing an auditing solution for Azure landing zones that will contain the following components:
* SQL audit logs for Azure SQL databases
* Windows Security logs from Azure virtual machines
* Azure App Service audit logs from App Service web apps
You need to recommend a centralized logging solution for the landing zones. The solution must meet the following requirements:
* Log all privileged access.
* Retain logs for at least 365 days.
* Minimize costs.
What should you include in the recommendation? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

正解：

You are designing a ransomware response plan that follows Microsoft Security Best Practices. You need to recommend a solution to minimize the risk of a ransomware attack encrypting local user files What should you include in the recommendation?

• A.Azure Files
• B.Microsoft Defender for Endpoint
• C.BitLocker Drive Encryption (BitLocker)
• D.Controlled folder access
• E.Windows Defender Device Guard