Microsoft Cybersecurity Architect SC-100 Exam Questions

You have a Microsoft 365 E5 subscription.

You need to recommend a solution to add a watermark to email attachments that contain sensitive data. What should you include in the recommendation?

Your on-premises network contains an e-commerce web app that was developed in Angular and Nodejs. The web app uses a MongoDB database. You plan to migrate the web app to Azure. The solution architecture team proposes the following architecture as an Azure landing zone.

You need to provide recommendations to secure the connection between the web app and the database. The solution must follow the Zero Trust model.

Solution: You recommend implementing Azure Key Vault to store credentials.

You have a Microsoft 365 E5 subscription and an Azure subscription.

You need to recommend a solution to enforce the Zero Trust principle of explicit verification for the subscriptions. The solution must be based on Zero Trust guidance in the Microsoft Cybersecurity Reference Architectures (MCRA).

What should you include in the recommendation?

Your company has a third-party security information and event management (SIEM) solution that uses Splunk and Microsoft Sentinel. You plan to integrate Microsoft Sentinel with Splunk.

You need to recommend a solution to send security events from Microsoft Sentinel to Splunk. What should you include in the recommendation?

You have a Microsoft Entra tenant named contoso.com.

You have an external partner that has a Microsoft Entra tenant named fabrikam.com.

You need to recommend an identity governance solution for contoso.com that meets the following requirements:

Enables the users in contoso.com and fabrikam.com to communicate by using shared Microsoft Teams channels.

Manages access to shared Teams channels in contoso.com by using groups in fabrikam.com.

Supports single sign-on (SSO).

Minimizes administrative effort.

Maximizes security.

What should you include in the recommendation?

You are creating an application lifecycle management process based on the Microsoft Security Development Lifecycle (SDL).

You need to recommend a security standard for onboarding applications to Azure. The standard will include recommendations for application design, development, and deployment

What should you include during the application design phase?

You have an Azure subscription that contains 100 virtual machines, a virtual network named VNet1, and 20 users. The virtual machines run Windows Server and are connected to VNet1. The users work remotely and access Azure resources from Linux workstations.

You need to ensure that the users can connect to the virtual machines from the workstations by using Secure Shell {SSH). The solution must meet the following requirements:

* Ensure that the users authenticate by using their Microsoft Entra credentials.

* Prevent the users from transferring files from the virtual machines by using SSH.

* Prevent the users from directly accessing the virtual machines by using the public IP address of the virtual machines.

What should you include in the solution?