What's more, part of that PrepAwayTest SC-100 dumps now are free: https://drive.google.com/open?id=12CYcJC8v6rviE2ghTvtiCZ8Fes06gzfj
The three versions of our SC-100 exam questions have their own unique characteristics. The PDF version of SC-100 training materials is convenient for you to print, the software version can provide practice test for you and the online version is for you to read anywhere at any time. If you are hesitating about which version should you choose, you can download our SC-100 free demo first to get a firsthand experience before you make any decision. You will love our SC-100 study guide for sure!
Microsoft SC-100 Exam is a rigorous and challenging examination that requires individuals to have a deep understanding of cybersecurity architecture. Individuals who pass the exam will be able to demonstrate that they have the skills and knowledge required to design and implement security solutions for Microsoft technologies. Microsoft Cybersecurity Architect certification is ideal for individuals who are looking to advance their careers in the field of cybersecurity.
>> SC-100 Valid Braindumps Pdf <<
If you want to get through the SC-100 practice exam quickly with less time and efforts, our learning materials is definitely your best option. One or two days' preparation and remember the correct SC-100 test answers, getting the certification will be simple for our candidates. Free trials of SC-100 Exam PDF are available for everyone and great discounts are waiting for you. Join us and realize your dream.
Microsoft SC-100 exam, also known as the Microsoft Cybersecurity Architect certification, is designed for professionals who want to validate their skills in designing and implementing secure solutions on the Microsoft platform. Microsoft Cybersecurity Architect certification is ideal for individuals who work in cybersecurity or IT and want to specialize in Microsoft security technologies. By passing the Microsoft SC-100 Exam, you can demonstrate your expertise in security management, identity and access management, security operations, and data protection.
NEW QUESTION # 113
Hotspot Question
You have three on-premises servers that run Windows Server and contain shared folders. The folders contain 10,000 files.
You have a Microsoft 365 tenant that uses Microsoft Purview and includes custom sensitive information types (SITs).
You have an Azure subscription that contains five Azure Blob Storage accounts and multiple web apps. The Blob Storage accounts contain data for the web apps.
You need to recommend a Microsoft Purview solution to scan the storage blobs and the shared folders. The solution must use the custom SITs to identify files that contain specific data.
What should you use for each type of storage? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
Box 1: Data Map
To apply custom Sensitive Information Types (SITs) to files in storage blobs with Microsoft Purview, create the custom SIT in the Purview portal, then connect your Azure storage account to the Microsoft Purview Data Map and scan it to detect the custom SIT. The custom SIT will then be used by Microsoft Defender for Storage to identify sensitive data in storage accounts, triggering alerts and other actions based on your sensitive data threat detection configurations.
Box 2: The Information Protection Scanner
To apply custom Sensitive Information Types (SITs) to on-premises files, you need to use the Microsoft Purview Information Protection Scanner to scan the files on your on-premises servers.
First, you create your custom SITs in the Purview portal. Then, you configure a Data Loss Prevention (DLP) policy that utilizes these custom SITs and deploy it to the scanner, which then discovers and classifies sensitive information in your on-premises file shares, enabling you to enforce protection actions.
Reference:
https://learn.microsoft.com/en-au/azure/defender-for-cloud/enable-defender-for-storage-data- sensitivity
https://learn.microsoft.com/en-us/purview/deploy-scanner
NEW QUESTION # 114
Your company has the virtual machine infrastructure shown in the following table.
The company plans to use Microsoft Azure Backup Server (MABS) to back up the virtual machines to Azure.
You need to provide recommendations to increase the resiliency of the backup strategy to mitigate attacks such as ransomware.
What should you include in the recommendation?
Answer: D
NEW QUESTION # 115
You are planning the security requirements for Azure Cosmos DB Core (SQL) API accounts.
You need to recommend a solution to audit all users that access the data in the Azure Cosmos DB accounts.
Which two configurations should you include in the recommendation? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.
Answer: A,B
Explanation:
LT-2: Enable threat detection for Azure identity and access management
Guidance: Azure Active Directory (Azure AD) provides the following user logs, which can be viewed in Azure AD reporting or integrated with Azure Monitor, Microsoft Sentinel, or other SIEM/monitoring tools for more sophisticated monitoring and analytics use cases:
Sign-ins - The sign-ins report provides information about the usage of managed applications and user sign-in activities.
Audit logs - Provides traceability through logs for all changes done by various features within Azure AD. Examples of audit logs include changes made to any resources within Azure AD, like adding or removing users, apps, groups, roles, and policies.
Disable local authentication methods so that your Cosmos DB database accounts exclusively require Azure Active Directory identities for authentication.
Enforcing RBAC as the only authentication method
In situations where you want to force clients to connect to Azure Cosmos DB through RBAC exclusively, you have the option to disable the account's primary/ secondary keys. When doing so, any incoming request using either a primary/secondary key or a resource token will be actively rejected.
Reference:
https://docs.microsoft.com/en-us/security/benchmark/azure/baselines/cosmos-db-security- baseline
https://docs.microsoft.com/en-us/azure/cosmos-db/policy-reference
https://docs.microsoft.com/en-us/azure/cosmos-db/how-to-setup-rbac#disable-local-auth
NEW QUESTION # 116
Your network contains an on-premises Active Directory Domain Services (AO DS) domain. The domain contains a server that runs Windows Server and hosts shared folders The domain syncs with Azure AD by using Azure AD Connect Azure AD Connect has group writeback enabled.
You have a Microsoft 365 subscription that uses Microsoft SharePoint Online.
You have multiple project teams. Each team has an AD DS group that syncs with Azure AD Each group has permissions to a unique SharePoint Online site and a Windows Server shared folder for its project. Users routinely move between project teams.
You need to recommend an Azure AD identity Governance solution that meets the following requirements:
* Project managers must verify that their project group contains only the current members of their project team
* The members of each project team must only have access to the resources of the project to which they are assigned
* Users must be removed from a project group automatically if the project manager has MOT verified the group s membership for 30 days.
* Administrative effort must be minimized.
What should you include in the recommendation? To answer select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
NEW QUESTION # 117
You have 50 Azure subscriptions.
You need to monitor resource in the subscriptions for compliance with the ISO 27001:2013 standards. The solution must minimize the effort required to modify the list of monitored policy definitions for the subscriptions.
NOTE: Each correct selection is worth one point.
Answer: A,E
Explanation:
Topic 1, Litware, inc. Case Study
Overview
Litware, inc. is a financial services company that has main offices in New York and San Francisco. litware has
30 branch offices and remote employees across the United States. The remote employees connect to the main offices by using a VPN.
Litware has grown significantly during the last two years due to mergers and acquisitions. The acquisitions include several companies based in France.
Existing Environment
Litware has an Azure Active Directory (Azure AD) tenant that syncs with an Active Directory Domain Services (AD D%) forest named Utvvare.com and is linked to 20 Azure subscriptions. Azure AD Connect is used to implement pass-through authentication. Password hash synchronization is disabled, and password writeback is enabled. All Litware users have Microsoft 365 E5 licenses.
The environment also includes several AD DS forests, Azure AD tenants, and hundreds of Azure subscriptions that belong to the subsidiaries of Litware.
Planned Changes
Litware plans to implement the following changes:
* Create a management group hierarchy for each Azure AD tenant.
* Design a landing zone strategy to refactor the existing Azure environment of Litware and deploy all future Azure workloads.
* Implement Azure AD Application Proxy to provide secure access to internal applications that are currently accessed by using the VPN.
Business Requirements
Litware identifies the following business requirements:
* Minimize any additional on-premises infrastructure.
* Minimize the operational costs associated with administrative overhead.
Hybrid Requirements
Litware identifies the following hybrid cloud requirements:
* Enable the management of on-premises resources from Azure, including the following:
*Use Azure Policy for enforcement and compliance evaluation.
* Provide change tracking and asset inventory.
* Implement patch management.
* Provide centralized, cross-tenant subscription management without the overhead of maintaining guest accounts.
Microsoft Sentinel Requirements
Litware plans to leverage the security information and event management (SIEM) and security orchestration automated response (SOAK) capabilities of Microsoft Sentinel. The company wants to centralize Security Operations Center (SOQ by using Microsoft Sentinel.
Identity Requirements
Litware identifies the following identity requirements:
* Detect brute force attacks that directly target AD DS user accounts.
* Implement leaked credential detection in the Azure AD tenant of Litware.
* Prevent AD DS user accounts from being locked out by brute force attacks that target Azure AD user accounts.
* Implement delegated management of users and groups in the Azure AD tenant of Litware, including support for.
* The management of group properties, membership, and licensing
* The management of user properties,
passwords, and licensing
* The delegation of user management based on business units.
Regulatory Compliance Requirements
Litware identifies the following regulatory compliance requirements:
* insure data residency compliance when collecting logs, telemetry, and data owned by each United States- and France-based subsidiary.
* Leverage built-in Azure Policy definitions to evaluate regulatory compliance across the entire managed environment.
* Use the principle of least privilege.
Azure Landing Zone Requirements
Litware identifies the following landing zone requirements:
* Route all internet-bound traffic from landing zones through Azure Firewall in a dedicated Azure subscription.
* Provide a secure score scoped to the landing zone.
* Ensure that the Azure virtual machines in each landing zone communicate with Azure App Service web apps in the same zone over the Microsoft backbone network, rather than over public endpoints.
* Minimize the possibility of data exfiltration.
* Maximize network bandwidth.
The landing zone architecture will include the dedicated subscription, which will serve as the hub for internet and hybrid connectivity. Each landing zone will have the following characteristics:
* Be created in a dedicated subscription.
* Use a DNS namespace of litware.com.
Application Security Requirements
Litware identifies the following application security requirements:
* Identify internal applications that will support single sign-on (SSO) by using Azure AD Application Proxy.
* Monitor and control access to Microsoft SharePoint Online and Exchange Online data in real time.
NEW QUESTION # 118
......
SC-100 Authentic Exam Hub: https://www.prepawaytest.com/Microsoft/SC-100-practice-exam-dumps.html
P.S. Free & New SC-100 dumps are available on Google Drive shared by PrepAwayTest: https://drive.google.com/open?id=12CYcJC8v6rviE2ghTvtiCZ8Fes06gzfj