SC-100 Exam Question 26
You have a hybrid Azure AD tenant that has pass-through authentication enabled.
You are designing an identity security strategy.
You need to minimize the impact of brute force password attacks and leaked credentials of hybrid identities.
What should you include in the design? To answer, drag the appropriate features to the correct requirements.
Each feature may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.

You are designing an identity security strategy.
You need to minimize the impact of brute force password attacks and leaked credentials of hybrid identities.
What should you include in the design? To answer, drag the appropriate features to the correct requirements.
Each feature may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.

SC-100 Exam Question 27
You have an Azure environment that contains multiple workloads deployed across multiple subscriptions.
You need to recommend a solution to assess and improve the security posture of the workloads. The solution must meet the following requirements:
* Use the Microsoft Cloud Adoption Framework for Azure to evaluate compliance with cloud governance policies.
* Use the Azure Well-Architected Framework to secure individual workloads.
What should you include in the recommendation for each requirement? To answer, drag the appropriate recommendations to the correct requirements. Each recommendation may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content NOTE: Each correct selection is worth one point.

You need to recommend a solution to assess and improve the security posture of the workloads. The solution must meet the following requirements:
* Use the Microsoft Cloud Adoption Framework for Azure to evaluate compliance with cloud governance policies.
* Use the Azure Well-Architected Framework to secure individual workloads.
What should you include in the recommendation for each requirement? To answer, drag the appropriate recommendations to the correct requirements. Each recommendation may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content NOTE: Each correct selection is worth one point.

SC-100 Exam Question 28
Your company has offices in New York City and London. The London office contains an on-premises app named Appl.
You have a Microsoft Entra tenant named contoso.com that is hosted in North America.
You plan to manage access to App1 for the users in the London office by using Microsoft Entra Private Access. You will deploy Private Access by performing the following actions in the London office:
* Deploy Microsoft Entra Private Network connectors.
* Provision an ExpressRoute circuit to the closest peering location.
You need to optimize the network for the planned deployment. The solution must meet the following requirements:
* Maximize redundancy for connectivity to Appl.
* Minimize network latency when accessing Appl.
* Maximize security.
* Minimize costs.
What should you include in the solution? To answer, select the appropriate options in the answer area. NOTE:
Each correct selection is worth one point.

You have a Microsoft Entra tenant named contoso.com that is hosted in North America.
You plan to manage access to App1 for the users in the London office by using Microsoft Entra Private Access. You will deploy Private Access by performing the following actions in the London office:
* Deploy Microsoft Entra Private Network connectors.
* Provision an ExpressRoute circuit to the closest peering location.
You need to optimize the network for the planned deployment. The solution must meet the following requirements:
* Maximize redundancy for connectivity to Appl.
* Minimize network latency when accessing Appl.
* Maximize security.
* Minimize costs.
What should you include in the solution? To answer, select the appropriate options in the answer area. NOTE:
Each correct selection is worth one point.

SC-100 Exam Question 29
Your company has an Azure subscription that has enhanced security enabled for Microsoft Defender for Cloud.
The company signs a contract with the United States government.
You need to review the current subscription for NIST 800-53 compliance.
What should you do first?
The company signs a contract with the United States government.
You need to review the current subscription for NIST 800-53 compliance.
What should you do first?
SC-100 Exam Question 30
A customer follows the Zero Trust model and explicitly verifies each attempt to access its corporate applications.
The customer discovers that several endpoints are infected with malware.
The customer suspends access attempts from the infected endpoints.
The malware is removed from the end point.
Which two conditions must be met before endpoint users can access the corporate applications again? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
The customer discovers that several endpoints are infected with malware.
The customer suspends access attempts from the infected endpoints.
The malware is removed from the end point.
Which two conditions must be met before endpoint users can access the corporate applications again? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.






