Free Microsoft SC-100 Exam Dumps Questions & Answers

You have an operational model based on the Microsoft Cloud Adoption framework for Azure.
You need to recommend a solution that focuses on cloud-centric control areas to protect resources such as endpoints, database, files, and storage accounts.
What should you include in the recommendation?

• A.business resilience
• B.security baselines in the Microsoft Cloud Security Benchmark
• C.modern access control
• D.network isolation

You need to recommend a solution to secure the MedicalHistory data in the ClaimsDetail table. The solution must meet the Contoso developer requirements.
What should you include in the recommendation?

• A.Always Encrypted
• B.row-level security (RLS)
• C.Transparent Data Encryption (TDE)
• D.dynamic data masking
• E.data classification

Your company plans to apply the Zero Trust Rapid Modernization Plan (RaMP) to its IT environment.
You need to recommend the top three modernization areas to prioritize as part of the plan.
Which three areas should you recommend based on RaMP? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

• A.modern security operations
• B.infrastructure and development
• C.user access and productivity
• D.data, compliance, and governance
• E.operational technology (OT) and loT

You have a Microsoft Entra tenant and an Azure subscription.
You are evaluating the use of a risk-based Conditional Access policy to control the access of workload identities to resources.
To which type of identity should you apply the policy, and which signal source can you use as part of the policy? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Correct Answer:

Explanation:

Your company has an office in Seattle.
The company has two Azure virtual machine scale sets hosted on different virtual networks.
The company plans to contract developers in India.
You need to recommend a solution provide the developers with the ability to connect to the virtual machines over SSL from the Azure portal. The solution must meet the following requirements:
* Prevent exposing the public IP addresses of the virtual machines.
* Provide the ability to connect without using a VPN.
* Minimize costs.
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

• A.Deploy Azure Bastion to one virtual network.
• B.Enable just-in-time VM access on the virtual machines.
• C.Deploy Azure Bastion to each virtual network.
• D.Create a hub and spoke network by using virtual network peering.
• E.Create NAT rules and network rules in Azure Firewall.