100% Authentic & Most Updated SC-100 Dumps

Question 1

Your company has a Microsoft 365 E5 subscription. Users use Microsoft Teams, Exchange Online, SharePoint Online, and OneDrive for sharing and collaborating. The company identifies protected health information (PHI) within stored documents and communications. What should you recommend using to prevent the PHI from being shared outside the company? 

A. insider risk management policies
 B. data loss prevention (DLP) policies 
C. sensitivity label policies 
D. retention policies 

Show Answer

Question 2

A customer has a Microsoft 365 E5 subscription and an Azure subscription. The customer wants to centrally manage security incidents, analyze log, audit activity, and hunt for potential threats across all deployed services. You need to recommend a solution for the customer. The solution must minimize costs. What should you include in the recommendation? 

A. Microsoft 365 Defender 
B. Microsoft Defender for Cloud 
C. Microsoft Defender for Cloud Apps 
D. Microsoft Sentinel 

Show Answer

Question 3

Your company has a Microsoft 365 subscription and uses Microsoft Defender for Identity. You are informed about incidents that relate to compromised identities. You need to recommend a solution to expose several accounts for attackers to exploit. When the attackers attempt to exploit the accounts, an alert must be triggered. Which Defender for Identity feature should you include in the recommendation? 

A. standalone sensors 
B. honeytoken entity tags 
C. sensitivity labels 
D. custom user tags 

Show Answer

Question 4

Your company has a Microsoft 365 E5 subscription. The company wants to identify and classify data in Microsoft Teams, SharePoint Online, and Exchange Online. You need to recommend a solution to identify documents that contain sensitive information. What should you include in the recommendation? 

A. data classification content explorer 
B. data loss prevention (DLP) 
C. eDiscovery 
D. Information Governance 

Show Answer

Question 5

Your company is developing a modern application that will run as an Azure App Service web app. You plan to perform threat modeling to identify potential security issues by using the Microsoft Threat Modeling Tool. Which type of diagram should you create? 

A. dataflow 
B. system flow 
C. process flow 
D. network flow 

Show Answer

Question 6

Your company has an on-premises network and an Azure subscription. The company does NOT have a Site-to-Site VPN or an ExpressRoute connection to Azure. You are designing the security standards for Azure App Service web apps. The web apps will access Microsoft SQL Server databases on the network. You need to recommend security standards that will allow the web apps to access the databases. The solution must minimize the number of open internet-accessible endpoints to the on-premises network. What should you include in the recommendation?

A. a private endpoint 
B. hybrid connections 
C. virtual network NAT gateway integration 
D. virtual network integration 

Show Answer

Question 7

Your company develops several applications that are accessed as custom enterprise applications in Azure Active Directory (Azure AD). You need to recommend a solution to prevent users on a specific list of countries from connecting to the applications. What should you include in the recommendation?

A. activity policies in Microsoft Defender for Cloud Apps 
B. sign-in risk policies in Azure AD Identity Protection 
C. device compliance policies in Microsoft Endpoint Manager 
D. Azure AD Conditional Access policies 
E. user risk policies in Azure AD Identity Protection 

Show Answer

Question 8

You have a Microsoft 365 E5 subscription. You are designing a solution to protect confidential data in Microsoft SharePoint Online sites that contain more than one million documents. You need to recommend a solution to prevent Personally Identifiable Information (Pll) from being shared. Which two components should you include in the recommendation? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.  

A. data loss prevention (DLP) policies 
B. sensitivity label policies 
C. retention label policies 
D. eDiscovery cases 

Show Answer

Question 9

You are designing a security strategy for providing access to Azure App Service web apps through an Azure Front Door instance. You need to recommend a solution to ensure that the web apps only allow access through the Front Door instance. Solution: You recommend access restrictions that allow traffic from the Front Door service tags. Does this meet the goal?

A. Yes 
B. No 

Show Answer

Question 10

Your company has a hybrid cloud infrastructure that contains an on-premises Active Directory Domain Services (AD DS) forest, a Microsoft B65 subscription, and an Azure subscription. The company's on-premises network contains internal web apps that use Kerberos authentication. Currently, the web apps are accessible only from the network. You have remote users who have personal devices that run Windows 11. You need to recommend a solution to provide the remote users with the ability to access the web apps. The solution must meet the following requirements: • Prevent the remote users from accessing any other resources on the network. • Support Azure Active Directory (Azure AD) Conditional Access. • Simplify the end-user experience. What should you include in the recommendation?

A. Azure AD Application Proxy 
B. Azure Virtual WAN 
C. Microsoft Tunnel 
D. web content filtering in Microsoft Defender for Endpoint 

Show Answer