SC-100 Exam Question 26
You have a Microsoft 365 tenant named contoso.com.
You need to ensure that users can authenticate only to contoso.com. The solution must meet the following requirements:
- Prevent the users from authenticating to other Microsoft 365 tenants.
- Minimize administrative effort.
What should you use?
You need to ensure that users can authenticate only to contoso.com. The solution must meet the following requirements:
- Prevent the users from authenticating to other Microsoft 365 tenants.
- Minimize administrative effort.
What should you use?
SC-100 Exam Question 27
Drag and Drop Question
You have an Azure subscription that contains a resources group named RG1. RG1 contains multiple Azure Files shares.
You need to recommend a solution to deploy a backup solution for the shares. The solution must meet the following requirements:
- Prevent the deletion of backups and the vault used to store the
backups.
- Prevent privilege escalation attacks against the backup solution.
- Prevent the modification of the backup retention period.
Which three actions should you recommend be performed in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
You have an Azure subscription that contains a resources group named RG1. RG1 contains multiple Azure Files shares.
You need to recommend a solution to deploy a backup solution for the shares. The solution must meet the following requirements:
- Prevent the deletion of backups and the vault used to store the
backups.
- Prevent privilege escalation attacks against the backup solution.
- Prevent the modification of the backup retention period.
Which three actions should you recommend be performed in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
SC-100 Exam Question 28
You have a Microsoft 365 tenant that contains two groups named Group1 and Group2.
You use Microsoft Defender XDR to manage the tenants of your company's customers.
You need to ensure that the users in Group1 can perform security tasks in the tenant of each customer. The solution must meet the following requirements:
- The Group1 users must only be assigned the Security Operator role for the customer tenants.
- The users in Group2 must be able to assign the Security Operators
role to the Group1 users for the customer tenants.
- The use of quest accounts must be minimized.
- Administrative effort must be minimized.
What should you include in the solution?
You use Microsoft Defender XDR to manage the tenants of your company's customers.
You need to ensure that the users in Group1 can perform security tasks in the tenant of each customer. The solution must meet the following requirements:
- The Group1 users must only be assigned the Security Operator role for the customer tenants.
- The users in Group2 must be able to assign the Security Operators
role to the Group1 users for the customer tenants.
- The use of quest accounts must be minimized.
- Administrative effort must be minimized.
What should you include in the solution?
SC-100 Exam Question 29
You have on-premises Windows 11 devices that have the Global Secure Access client deployed.
You have a Microsoft 365 subscription that uses Microsoft SharePoint Online and Exchange Online.
You deploy Microsoft Entra Internet Access from the on-premises network to Microsoft 365. The deployment has the Microsoft 365 profile enabled and contains the following:
- Default traffic policies for Microsoft 365 services
- A linked Conditional Access policy that performs compliant network
checks with continuous access evaluation and is applied to all users
- An assignment to all the devices
- An assignment to a remote network associated with the on-premises
network
Which Microsoft 365 resources are protected by using continuous access evaluation?
You have a Microsoft 365 subscription that uses Microsoft SharePoint Online and Exchange Online.
You deploy Microsoft Entra Internet Access from the on-premises network to Microsoft 365. The deployment has the Microsoft 365 profile enabled and contains the following:
- Default traffic policies for Microsoft 365 services
- A linked Conditional Access policy that performs compliant network
checks with continuous access evaluation and is applied to all users
- An assignment to all the devices
- An assignment to a remote network associated with the on-premises
network
Which Microsoft 365 resources are protected by using continuous access evaluation?
SC-100 Exam Question 30
Hotspot Question
You have a Microsoft 365 E5 subscription that uses Microsoft Teams.
Your company has an investment department and a research department. Each department has a compliance team.
You are designing a Microsoft Purview Information Barriers (IBs) solution to restrict communication between the departments. The solution must meet the following requirements:
- The employees in each department must only be able to communicate with the employees in their respective department.
- The employees on the compliance team of each department must be able to communicate with the employees on the compliance team of the other department.
What is the minimum number of segments and IB policies required? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
You have a Microsoft 365 E5 subscription that uses Microsoft Teams.
Your company has an investment department and a research department. Each department has a compliance team.
You are designing a Microsoft Purview Information Barriers (IBs) solution to restrict communication between the departments. The solution must meet the following requirements:
- The employees in each department must only be able to communicate with the employees in their respective department.
- The employees on the compliance team of each department must be able to communicate with the employees on the compliance team of the other department.
What is the minimum number of segments and IB policies required? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
