SC-100 Azure Practice Questions

Your on-premises network contains an e-commerce web app that was developed in Angular and Nodejs. The web app uses a MongoDB database. You plan to migrate the web app to Azure. The solution architecture team proposes the following architecture as an Azure landing zone. You need to provide recommendations to secure the connection between the web app and the database. The solution must follow the Zero Trust model. Solution: You recommend implementing Azure Key Vault to store credentials.

• AA. Yes
• BB. No

Your on-premises network contains an e-commerce web app that was developed in Angular and Node.js. The web app uses a MongoDB database. You plan to migrate the web app to Azure. The solution architecture team proposes the following architecture as an Azure landing zone. You need to provide recommendations to secure the connection between the web app and the database. The solution must follow the Zero Trust model. Solution: You recommend implementing Azure Front Door with Azure Web Application Firewall (WAF). Does this meet the goal?

• AA. Yes
• BB. No

Your company is preparing for cloud adoption. You are designing security for Azure landing zones. Which two preventative controls can you implement to increase the secure score? Each NOTE: Each correct selection is worth one point.

Select 2 answers.

• AA. Azure Firewall
• BB. Azure Web Application Firewall (WAF)
• CC. Microsoft Defender for Cloud alerts
• DD. Azure Active Directory (Azure AD Privileged Identity Management (PIM)
• EE. Microsoft Sentinel

You have a customer that has a Microsoft 365 subscription and an Azure subscription. The customer has devices that run either Windows, iOS, Android, or macOS. The Windows devices are deployed on-premises and in Azure. You need to design a security solution to assess whether all the devices meet the customer's compliance rules. What should you include in the solution?

• AA. Microsoft Information Protection
• BB. Microsoft Defender for Endpoint
• CC. Microsoft Sentinel
• DD. Microsoft Endpoint Manager

For a Microsoft cloud environment, you are designing a security architecture based on the Microsoft Cloud Security Benchmark. What are three best practices for identity management based on the Azure Security Benchmark? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

Select 3 answers.

• AA. Manage application identities securely and automatically.
• BB. Manage the lifecycle of identities and entitlements
• CC. Protect identity and authentication systems.
• DD. Enable threat detection for identity and access management.
• EE. Use a centralized identity and authentication system.