DOWNLOAD the newest ITCertMagic SC-100 PDF dumps from Cloud Storage for free: https://drive.google.com/open?id=15Zm0wW7FLZq7jcLB62knmTrxzNKRhj4y
Our SC-100 study guide is known as instant download, once you finish your payment, we will send the downloading link and password to you, and you can get SC-100 study guide within ten minutes. If you don’t receive them, please contact our service stuff, they will solve the problem for you. Furthermore, SC-100 Study Guide includes the questions and answers, and you can get enough practice through them.
| Section | Weight | Objectives |
|---|---|---|
| Design security operations, identity, and compliance capabilities | 25–30% | - Design governance, risk, and compliance (GRC) capabilities
|
| Design security solutions for applications and data | 20–25% | - Design application security strategy
- Design data security and privacy strategy
|
| Design solutions that align with security best practices and priorities | 20–25% | - Design a Zero Trust strategy and architecture
- Recommend security best practices and priorities - Design a ransomware resilience strategy |
| Design security solutions for infrastructure | 25–30% | - Design endpoint security strategy - Design security for DevOps and workloads - Design security for on-premises, hybrid, and multicloud infrastructure
|
By earning the Microsoft SC-100 certification, you may stop worrying about the bad things that might happen and instead concentrate on the advantages of making this decision and developing new skills that will increase your chances of landing your ideal job. You should start the preparations for the Microsoft SC-100 Certification Exam to improve your knowledge.
NEW QUESTION # 12
Hotspot Question
You have an Azure subscription. The subscription contains an Azure SQL database named DB1 that stores customer data.
You have a Microsoft 365 subscription that uses Microsoft SharePoint Online, OneDrive, and Teams.
Users frequently create Microsoft Office documents that contain data from DB1.
You need to recommend a Microsoft Purview solution that meets the following requirements:
- Identifies Office documents that contain customer addresses and phone numbers sourced from DB1
- Generates an alert if a user downloads an above average number of
files that contain data from DB1
- Minimizes the number of false positives
What should you include in the solution for each requirement? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
Box 1: Document fingerprinting
Identifies Office documents that contain customer addresses and phone numbers sourced from DB1 Document fingerprinting is a Microsoft Purview feature that takes a standard form that you provide and creates a sensitive information type (SIT) based on that form. Document fingerprinting makes it easier for you to protect sensitive information by identifying standard forms that are used throughout your organization.
Document fingerprinting includes the following benefits:
SITs created from document fingerprinting can be used as a detection method in DLP policies scoped to Exchange, SharePoint, OneDrive, Teams, and Devices.
Etc.
Box 2: Microsoft Purview insider risk management
Generates an alert if a user downloads an above average number of files that contain data from DB1 Microsoft Purview, Configure intelligent detections in insider risk management Use can use the Intelligent detections setting in Microsoft Purview Insider Risk Management to:
* Boost the score for unusual file download activities by entering a minimum number of daily events.
* Etc.
File activity detection
You can use this section to specify the number of daily events required to boost the risk score for download activity that's considered unusual for a user. For example, if you enter "25", if a user downloads 10 files on average over the previous 30 days, but a policy detects that they downloaded 20 files on one day, the score for that activity won't be boosted even though it's unusual for that user because the number of files they downloaded that day was less than 25.
Reference:
https://learn.microsoft.com/en-us/purview/sit-document-fingerprinting
https://learn.microsoft.com/en-us/purview/insider-risk-management-settings-intelligent-detections
NEW QUESTION # 13
Your company is developing a new Azure App Service web app.
You are providing design assistance to verify the security of the web app.
You need to recommend a solution to test the web app for vulnerabilities such as insecure server configurations, cross-site scripting (XSS), and SQL injection.
What should you include in the recommendation?
Answer: B
Explanation:
DAST tools analyze programs while they are executing to find security vulnerabilities such as memory corruption, insecure server configuration, cross-site scripting, user privilege issues, SQL injection, and other critical security concerns.
Reference:
https://docs.microsoft.com/en-us/azure/security/develop/secure-develop
NEW QUESTION # 14
You have a Microsoft 365 E5 subscription.
You need to recommend a security solution that meets the following requirements:
* Automatically identifies and stops external, brute force attacks against accounts in the subscription
* Automatically identifies and stops external attacks that use an internal account to exfiltrate data from Microsoft SharePoint Online sites in the subscription What should you include in the recommendation for each requirement? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
NEW QUESTION # 15
You plan to deploy a dynamically scaling, Linux-based Azure Virtual Machine Scale Set that will host jump servers. The jump servers will be used by support staff who connect from personal and kiosk devices via the internet. The subnet of the jump servers will be associated to a network security group (NSG).
You need to design an access solution for the Azure Virtual Machine Scale Set. The solution must meet the following requirements:
* Ensure that each time the support staff connects to a jump server; they must request access to the server.
* Ensure that only authorized support staff can initiate SSH connections to the jump servers.
* Maximize protection against brute-force attacks from internal networks and the internet.
* Ensure that users can only connect to the jump servers from the internet.
* Minimize administrative effort.
What should you include in the solution? To answer, select the appropriate options in the answer area. NOTE:
Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
NEW QUESTION # 16
You receive a security alert in Microsoft Defender for Cloud as shown in the exhibit. (Click the Exhibit tab.)
After remediating the threat which policy definition should you assign to prevent the threat from reoccurring?
Answer: A
Explanation:
https://docs.microsoft.com/en-us/azure/storage/blobs/anonymous-read-access-prevent
NEW QUESTION # 17
......
Experts have prepared the SC-100 desktop-based exam simulation software. There are SC-100 actual questions in the practice test to give you an exact impression of the Microsoft Cybersecurity Architect SC-100 original test. This type of Microsoft Cybersecurity Architect SC-100 actual exam simulations helps to calm your anxiety.
Exam SC-100 Collection Pdf: https://www.itcertmagic.com/Microsoft/real-SC-100-exam-prep-dumps.html
What's more, part of that ITCertMagic SC-100 dumps now are free: https://drive.google.com/open?id=15Zm0wW7FLZq7jcLB62knmTrxzNKRhj4y