그리고 Itexamdump SC-100 시험 문제집의 전체 버전을 클라우드 저장소에서 다운로드할 수 있습니다: https://drive.google.com/open?id=1fljLKEbpGsMiREaVcbLLmb1K6IXo39HQ
인재도 많고 경쟁도 치열한 이 사회에서 IT업계 인재들은 인기가 아주 많습니다.하지만 팽팽한 경쟁률도 무시할 수 없습니다.많은 IT인재들도 어려운 인증시험을 패스하여 자기만의 자리를 지켜야만 합니다.우리 Itexamdump에서는 마침 전문적으로 이러한 IT인사들에게 편리하게 시험을 패스할수 있도록 유용한 자료들을 제공하고 있습니다. Microsoft 인증SC-100인증은 아주 중요한 인증시험중의 하나입니다. Itexamdump의Microsoft 인증SC-100로 시험을 한방에 정복하세요.
| Section | Weight | Objectives |
|---|---|---|
| Design security solutions for infrastructure (20-25%) | 22.5% | - Design security for SaaS, PaaS, and IaaS services
|
| Design security solutions for applications and data (20-25%) | 22.5% | - Design security for data
|
| Design security operations, identity, and compliance capabilities (30-35%) | 32.5% | - Evaluate regulatory compliance
|
| Design solutions that align with security best practices and priorities (20-25%) | 22.5% | - Evaluate security operations
|
Microsoft 인증SC-100인증시험공부자료는Itexamdump에서 제공해드리는Microsoft 인증SC-100덤프가 가장 좋은 선택입니다. Itexamdump에서는 시험문제가 업데이트되면 덤프도 업데이트 진행하도록 최선을 다하여 업데이트서비스를 제공해드려 고객님께서소유하신 덤프가 시장에서 가장 최신버전덤프로 되도록 보장하여 시험을 맞이할수 있게 도와드립니다.
질문 # 333
Your company uses Microsoft Defender for Cloud and Microsoft Sentinel. The company is designing an application that will have the architecture shown in the following exhibit.
You are designing a logging and auditing solution for the proposed architecture. The solution must meet the following requirements-.
* Integrate Azure Web Application Firewall (WAF) logs with Microsoft Sentinel.
* Use Defender for Cloud to review alerts from the virtual machines.
What should you include in the solution? To answer, select the appropriate options in the answer area. NOTE:
Each correct selection is worth one point.
정답：
설명：
Explanation:
질문 # 334
You have a Microsoft 365 E5 subscription.
You need to recommend a security solution that meets the following requirements:
* Automatically identifies and stops external, brute force attacks against accounts in the subscription
* Automatically identifies and stops external attacks that use an internal account to exfiltrate data from Microsoft SharePoint Online sites in the subscription What should you include in the recommendation for each requirement? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
정답：
설명：
Explanation:
질문 # 335
Your company finalizes the adoption of Azure and is implementing Microsoft Defender for Cloud.
You receive the following recommendations in Defender for Cloud
* Access to storage accounts with firewall and virtual network configurations should be restricted,
* Storage accounts should restrict network access using virtual network rules.
* Storage account should use a private link connection.
* Storage account public access should be disallowed.
You need to recommend a service to mitigate identified risks that relate to the recommendations. What should you recommend?
정답：A
질문 # 336
You have an Azure subscription that contains a Microsoft Sentinel workspace.
Your on-premises network contains firewalls that support forwarding event logs m the Common Event Format (CEF). There is no built-in Microsoft Sentinel connector for the firewalls You need to recommend a solution to ingest events from the firewalls into Microsoft Sentinel.
What should you include m the recommendation?
정답：C
설명：
Topic 2, Fabrikam, Inc Case Study 1
OverView
Fabrikam, Inc. is an insurance company that has a main office in New York and a branch office in Paris.
On-premises Environment
The on-premises network contains a single Active Directory Domain Services (AD DS) domain named corp.
fabrikam.com.
Azure Environment
Fabrikam has the following Azure resources:
* An Azure Active Directory (Azure AD) tenant named fabrikam.onmicrosoft.com that syncs with corp.
fabnkam.com
* A single Azure subscription named Sub1
* A virtual network named Vnet1 in the East US Azure region
* A virtual network named Vnet2 in the West Europe Azure region
* An instance of Azure Front Door named FD1 that has Azure Web Application Firewall (WAR enabled
* A Microsoft Sentinel workspace
* An Azure SQL database named ClaimsDB that contains a table named ClaimDetails
* 20 virtual machines that are configured as application servers and are NOT onboarded to Microsoft Defender for Cloud
* A resource group named TestRG that is used for testing purposes only
* An Azure Virtual Desktop host pool that contains personal assigned session hosts All the resources in Sub1 are in either the East US or the West Europe region.
Partners
Fabrikam has contracted a company named Contoso, Ltd. to develop applications. Contoso has the following infrastructure-.
* An Azure AD tenant named contoso.onmicrosoft.com
* An Amazon Web Services (AWS) implementation named ContosoAWS1 that contains AWS EC2 instances used to host test workloads for the applications of Fabrikam Developers at Contoso will connect to the resources of Fabrikam to test or update applications. The developers will be added to a security Group named Contoso Developers in fabrikam.onmicrosoft.com that will be assigned to roles in Sub1.
The ContosoDevelopers group is assigned the db.owner role for the ClaimsDB database.
Compliance Event
Fabrikam deploys the following compliance environment:
* Defender for Cloud is configured to assess all the resources in Sub1 for compliance to the HIPAA HITRUST standard.
* Currently, resources that are noncompliant with the HIPAA HITRUST standard are remediated manually.
* Qualys is used as the standard vulnerability assessment tool for servers.
Problem Statements
The secure score in Defender for Cloud shows that all the virtual machines generate the following recommendation-. Machines should have a vulnerability assessment solution.
All the virtual machines must be compliant in Defender for Cloud.
ClaimApp Deployment
Fabrikam plans to implement an internet-accessible application named ClaimsApp that will have the following specification
* ClaimsApp will be deployed to Azure App Service instances that connect to Vnetl and Vnet2.
* Users will connect to ClaimsApp by using a URL of https://claims.fabrikam.com.
* ClaimsApp will access data in ClaimsDB.
* ClaimsDB must be accessible only from Azure virtual networks.
* The app services permission for ClaimsApp must be assigned to ClaimsDB.
Application Development Requirements
Fabrikam identifies the following requirements for application development:
* Azure DevTest labs will be used by developers for testing.
* All the application code must be stored in GitHub Enterprise.
* Azure Pipelines will be used to manage application deployments.
* All application code changes must be scanned for security vulnerabilities, including application code or configuration files that contain secrets in clear text. Scanning must be done at the time the code is pushed to a repository.
Security Requirement
Fabrikam identifies the following security requirements:
* Internet-accessible applications must prevent connections that originate in North Korea.
* Only members of a group named InfraSec must be allowed to configure network security groups (NSGs} and instances of Azure Firewall, VJM. And Front Door in Sub1.
* Administrators must connect to a secure host to perform any remote administration of the virtual machines.
The secure host must be provisioned from a custom operating system image.
AWS Requirements
Fabrikam identifies the following security requirements for the data hosted in ContosoAWSV.
* Notify security administrators at Fabrikam if any AWS EC2 instances are noncompliant with secure score recommendations.
* Ensure that the security administrators can query AWS service logs directly from the Azure environment.
Contoso Developer Requirements
Fabrikam identifies the following requirements for the Contoso developers;
* Every month, the membership of the ContosoDevelopers group must be verified.
* The Contoso developers must use their existing contoso.onmicrosoft.com credentials to access the resources in Sub1.
* The Comoro developers must be prevented from viewing the data in a column named MedicalHistory in the ClaimDetails table.
Compliance Requirement
Fabrikam wants to automatically remediate the virtual machines in Sub1 to be compliant with the HIPPA HITRUST standard. The virtual machines in TestRG must be excluded from the compliance assessment.
질문 # 337
Hotspot Question
You have an Azure subscription.
You need to create an Azure policy to ensure that all the resources in the subscription have tags assigned. The solution must ensure that the policy can remediate noncompliant resources automatically.
How should you configure the policy? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
정답：
설명：
Explanation:
Box 1: existenceCondition
a combination of the Azure Policy modify effect and a remediation task is the correct approach to ensure all resources in a subscription are tagged, and the existenceCondition property is a component of modify or auditIfNotExists policies, not typically for a simple modify policy that just adds a tag to the resource itself. To apply a tag to existing resources, you would assign the policy and then trigger a remediation task to update the non-compliant resources.
Box 2: modify
Azure Policy definitions modify effect
The modify effect is used to add, update, or remove properties or tags on a subscription or resource during creation or update. Existing non-compliant resources can also be remediated with a remediation task. Policy assignments with effect set as Modify require a managed identity to do remediation. A common example using modify effect is updating tags on resources such as
'costCenter'.
A modify effect policy assignment, combined with a remediation task for existing resources, is the standard and effective method to enforce tagging and ensure all resources in your subscription have the required tags.
Reference:
https://learn.microsoft.com/en-us/azure/governance/policy/concepts/effect-modify
질문 # 338
......
Itexamdump를 선택함으로, Itexamdump는 여러분Microsoft인증SC-100시험을 패스할 수 있도록 보장하고,만약 시험실패시 Itexamdump에서는 덤프비용전액환불을 약속합니다.
SC-100최신버전 시험공부자료: https://www.itexamdump.com/SC-100.html
참고: Itexamdump에서 Google Drive로 공유하는 무료, 최신 SC-100 시험 문제집이 있습니다: https://drive.google.com/open?id=1fljLKEbpGsMiREaVcbLLmb1K6IXo39HQ