SC-100 試験問題を無料オンラインアクセス
| 試験コード: | SC-100 |
| 試験名称: | Microsoft Cybersecurity Architect |
| 認定資格: | Microsoft |
| 無料問題数: | 343 |
| 更新日: | 2026-10-18 |
You have an on-premises network and a Microsoft 365 subscription.
You are designing a Zero Trust security strategy.
Which two security controls should you include as part of the Zero Trust solution? Each correct answer part of the solution.
NOTE: Each correct answer is worth one point.
You have a Microsoft Entra tenant named contoso.com that syncs with an Active Directory Domain Services (AD DS) domain named corp.contoso.com.
The domain contains 100 devices that have the following configurations:
* Hybrid joined
* Enrolled in Microsoft Intune
* Disabled built-in local administrator account
* Contain a local user account named User1 that is a member of the local administrators group You need to recommend a solution that meets the following requirements:
* Ensures that the Directory Services Restore Mode (DSRM) credentials of each domain controller are backed up to the AD DS database
* Ensures that the password of User1 changes automatically every 60 days
* Ensures that the credentials of User1 are stored in an encrypted store
* Prevents the User1 password from being changed manually
* Whenever possible, stores all credentials in contoso.com
* Minimizes administrative effort
What should you include in the recommendation? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.
You need to recommend a solution to scan the application code. The solution must meet the application development requirements. What should you include in the recommendation?
You are planning the security requirements for Azure Cosmos DB Core (SQL) API accounts. You need to recommend a solution to audit all users that access the data in the Azure Cosmos DB accounts. Which two configurations should you include in the recommendation? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
You have a Microsoft Entra tenant. The tenant contains a security group named Group1. Group1 contains the members of your company ' s IT support team.
You have an Azure subscription. The subscription contains 800 Windows devices that are Microsoft Entra joined and 200 Windows devices that are Microsoft Entra registered.
You have 200 standalone macOS devices.
You deploy 10 Windows devices that are Microsoft Entra joined and have the Microsoft Entra ExtensionAttribute1 value set to SecureWorkstation.
You need to recommend a Conditional Access solution that meets the following requirements:
* Only allows access to Microsoft Entra resources from devices that run Windows 10 or Windows 11
* Restricts Windows Azure Service Management API access to the following users:
o The members of Group1
o Users that authenticate by using multifactor authentication (MFA)
o Users that connect from a device that has the SecureWorkstation ExtensionAttribute1 The solution must minimize the number of required policies and maximize security.
What should include in the recommendation? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
