SC-100

What is the most effective way to prevent SQL Server administrators from accessing sensitive data stored in specific columns of a database?

Which solution should be recommended to prevent attackers from obtaining administrative permissions in Azure?

What happens if a website is removed but its custom domain remains in the DNS registrar?

Which method is designed to provide encryption during the transfer of data between applications and databases?

What strategy should be included when designing security controls for web applications to defend against unauthorized access?

When considering Azure Virtual Network configuration, which of the following options is least likely to enhance security?

Which option is considered a proactive approach to managing access and permissions in an Azure environment to mitigate ransomware attacks?

Which of the following strategies helps to secure critical operations in Azure Backup during a ransomware attack?

What role does Azure Monitor play in the context of ransomware incident response?

In the context of Azure Managed Identities, which statement is correct regarding their functionality?

Why might soft delete for backups be considered less optimal in a ransomware attack?

Which of the following measures does NOT directly address the risk of backup availability during a ransomware attack?

In case of a ransomware incident, immediate notification of backup configuration changes can help in which aspect?

What is a significant limitation of performing offline backups to Azure Data Box as a ransomware defense strategy?

Which approach enhances the security of backups by involving authorized personnel in critical operations?

What can be a consequence of not monitoring backup configurations in Azure?

Which feature should be described to enhance data discovery in Microsoft Purview?

What is a recommended strategy to mitigate the impact of ransomware attacks?

Which component of the Zero Trust RaMP focuses on ransomware recovery readiness?

Which of the following is NOT a focus area for reducing ransomware attack impacts?

In the context of Azure, what key strategy supports determined ransomware recovery processes?

What important element should be included in a resiliency strategy against potential ransomware threats?

Which feature is critical in Microsoft Purview for automating data classification?

Which recommendation should NOT be prioritized for reducing organizational impact during a ransomware attack?

Which of the following policies is correctly identified as a way to enhance security by blocking legacy authentication?

Microsoft Intune is a deployment collection of technologies for setting up and preconfiguring Windows devices.

What is the role of multi-factor authentication (MFA) in enhancing security?

To remotely manage devices and validate compliance health, you should include ______ in your security solution.

Match the following security measures with their corresponding benefits:

Which of the following statements is true regarding the Microsoft Secure Score?

Enabling Security defaults ensures that organizations receive full points for following recommended actions without exception.

Name one capability of Microsoft Defender for Endpoint.

Which of the following is a key strategy for modern perimeter design?

Azure landing zones provide a way to manage resources across multiple applications without isolation.

What is the purpose of Azure Lighthouse in a multi-tenant configuration?

Subscriptions for application resources are called __________.

Match the following Azure concepts with their definitions:

What should be recommended for architecture that aligns with the Microsoft Cloud Adoption Framework?

Management groups are the best option for isolating resources in Azure.

What type of workspace allows access to Microsoft Sentinel without using separate accounts?

To intercept authentication requests versus network traffic, one must establish a __________.

What is a key characteristic of Azure landing zones?

Which two tasks should you include in the design to address posture and vulnerability management controls PV-2 and PV-7?

Microsoft Defender for Cloud Apps is effective for detecting unusual behavior in cloud applications.

What is the primary goal of conducting regular red team operations?

Microsoft Defender for Cloud Apps can search for more than ________ SaaS applications.

Match the management tasks with their relevant posture improvement:

Which functionality of Microsoft Defender for Cloud Apps is important for application management?

Turn off remote debugging is a task that helps enforce secure configurations.

Name one reason why enabling resource logs is essential in security management.

The ability to ________ existing application deployments is critical for ensuring compliance.

Which of the following features allows Microsoft Defender for Cloud Apps to assess risk levels?

Which two solutions are recommended to ensure the security operations team can access the security logs and the operation logs while the IT operations team can only access the operations logs?

The Enhanced Security Admin Environment (ESAE) is specifically tailored for cloud-based environments following a Zero Trust model.

What does OSA provide in the context of operational security?

RaMP is the most aligned framework for adopting a privileged identity strategy based on the __________ model.

Match the following components with their respective functions:

Which Azure service is recommended to automate workflow for evaluating and remediating alerts in Microsoft Defender for Cloud?

Automation in security programs can help improve response times and ensure consistency in processes.

What is the main purpose of the eDiscovery (Premium) feature?

The cloud-based service for automating workflows in Azure is known as __________.

Match the following Azure services with their primary functions:

Which of the following statements is true regarding Azure Logic Apps?

Using Azure Functions apps is preferred for quick workflow automation in Microsoft Defender for Cloud.

What is one key benefit of automating security workflows?

To trigger automated actions upon security alerts, Microsoft Defender for Cloud utilizes __________.

What role does eDiscovery (Premium) serve in an organization?

Which framework is most aligned for rapidly adopting a privileged identity strategy in a Zero Trust model for Azure?

What is the primary function of the Log Analytics agent in relation to Microsoft Sentinel?

Which aspect does Microsoft Operational Security Assurance (OSA) NOT directly address?

Which of the following solutions would be least effective in ensuring that the IT operations team can access specific operational logs?

In relation to deploying Microsoft Sentinel, which is NOT a critical consideration for the security operations team?

Which capability of Microsoft Defender for Cloud is included for free in the Foundational CSPM plan?

What is the required subnet address range when creating the AzureBastionSubnet for Azure Bastion deployment?

Which aspect is a key feature of Azure Landing Zones?

What does the PV-1 MCSB control focus on in cloud security management?

Which option is NOT a capability you can enable with Microsoft Defender for Cloud?

In the context of posture and vulnerability management, which of the following tasks corresponds to PV-2?

What is the primary purpose of the Microsoft Cloud Security Benchmark (MCSB)?

Which aspect does the 'cloud security explorer' capability of Microsoft Defender cover?

What is the primary benefit of integrating Microsoft Purview with Microsoft Defender for Cloud?

Which component of Microsoft Sentinel is specifically designed to create customized visual reports for security operations?

What role does Microsoft Purview primarily play in an organization's cloud security strategy?

Which aspect of Microsoft Sentinel's functionality allows for immediate visualization after data source connections are made?

How does Microsoft Sentinel enhance the effectiveness of security operations teams?

What is a common challenge for security teams when managing data resources in cloud environments?

In what way can security teams prioritize their focus on data resources?

What kind of analytics capabilities do workbooks in Microsoft Sentinel provide?

Which of the following features makes workbooks particularly valuable for a security operations team?

What should security teams primarily focus on due to the threat posed by malicious actors targeting data resources?

What is the recommended approach for organizations to secure privileged identities?

Which of the following best describes the checklist approach outlined for Zero Trust deployment?

What does ransomware recovery readiness entail in the Zero Trust model?

Which method is suggested for validating trust for all access requests?

What is one of the key components in modernizing security operations within a Zero Trust framework?

What is a significant difference between RaMP guidance and traditional deployment methods?

When considering advanced security architectures, which of the following is a valid reason for using the Enhanced Security Admin Environment (ESAE)?

What is one of the core objectives for protecting administrative user accounts within the Zero Trust model?

What role does stakeholder accountability play in the RaMP approach?

Which solution specifically addresses privacy risk management for personal data in a Microsoft 365 environment?

What is the primary function of Privacy Risk Management policies in Microsoft Priva?

Which of the following capabilities does Privacy Risk Management in Microsoft Priva NOT provide?

What is a significant limitation of using Microsoft Viva Insights in relation to data privacy management?

Why is Advanced eDiscovery not suitable for ongoing privacy risk management?

Which user activity could significantly benefit from recommendations provided by Privacy Risk Management in Microsoft Priva?

In terms of personal data management, what feature of Privacy Risk Management is essential for limiting data exposure?

What type of recommendations does Privacy Risk Management in Microsoft Priva provide to users?

To whom are Privacy Risk Management policies primarily directed?

The append effect in Azure Policy only marks a policy as noncompliant for new resources.

Just In Time provisioning is the recommended solution for addressing the PV-1: Define and establish secure configurations MCSB control.

Azure Policy evaluates resources that have not been excluded or exempt.

For managing security tasks on Windows 11 and iOS devices, applying security baselines does not include configuring firewalls.

The PV-1 MCSB control emphasizes the importance of defining and establishing secure configurations.

Azure Landing Zones support the implementation of security standards for existing Azure resources only.

Each correct answer in designing a policy setting for Azure Policy must solely focus on denying policies.

Noncompliance in Azure Policy occurs only when new settings are implemented without prior review.

Playbooks in Microsoft Sentinel can only be run manually and not automatically.

Kusto Query Language is primarily designed for incident response orchestration.

Playbooks minimize the need for manual intervention by linking various security tools together.

Workbooks in Microsoft Sentinel are utilized for automating incident responses and alert triaging.

Alerts can be sent to Microsoft Teams channels as part of playbook functionality.

Members of the Enterprise Admins group are permitted to add or remove domains only with the approval of Domain Admins.

Data connectors serve the purpose of automating incident response actions.

The responses to detected threats can be automated through playbooks.

Microsoft Priva subject rights requests is specifically designed to streamline the management of personal data inquiries within compliance management.

The Azure Automation State Configuration tool is specifically designed for enhancing user experience in cloud management.

Playbooks do not support any collaborative features for handling incidents.

Kusto Query Language organizes data similarly to SQL with databases, tables, and columns.

The Microsoft cloud security benchmark (MCSB) includes controls for defining secure configurations in Azure resources.

The rights of the Domain Admins group allow them to implement forest-wide changes in Azure Active Directory.

Playbooks enhance security operations by requiring constant manual monitoring.

Microsoft Purview eDiscovery is the recommended solution for managing compliance-related personal data requests.

The Enterprise Admins group is solely responsible for raising functional levels in all domains of an AD DS forest.

Azure Automation State Configuration is primarily used to manage Network Security Groups in Azure.

Subject rights requests provide insights and workflows to assist in fulfilling data subject inquiries efficiently.

The recommended solution for assessing security in Azure must fully comply with Microsoft cloud security benchmark (MCSB) and SDLC practices.

Microsoft Defender for Endpoint provides endpoint detection and response capabilities specifically for macOS devices.

Security Orchestration, Automation, and Response (SOAR) capabilities in Microsoft Sentinel rely solely on manual processes.

Microsoft Sentinel Playbooks are integral in automating responses to security incidents within Microsoft Sentinel.

Microsoft Defender for Cloud provides the same level of endpoint detection and response functionalities as Microsoft Defender for Endpoint.

Azure Policy is primarily designed for real-time security orchestration and incident response.

A Microsoft Sentinel workbook is specifically designed to integrate Microsoft Sentinel with third-party security solutions.

Azure Event Hubs provides a straightforward integration between Microsoft Sentinel and the Splunk platform.

The recommended way to send security events from Microsoft Sentinel to Splunk is to use a Microsoft Sentinel data connector.

Azure Data Factory is tailored for real-time security event data forwarding.

Before endpoint users can access corporate applications again, client access tokens must be refreshed after malware removal.

Suspending access attempts from infected endpoints is an unnecessary step when following the Zero Trust model.

Workbooks in Microsoft Sentinel are designed for data integration between different SIEM platforms.

In the context of the Zero Trust model, specific verification of each access attempt is essential for security.

Malware removal from endpoints guarantees that they can immediately access corporate applications.

The Microsoft Sentinel Add-On for Splunk utilizes the Azure HTTP Data Collector API for security log ingestion.