Free Microsoft SC-100 Exam Questions

A customer has a hybrid cloud infrastructure that contains a Microsoft 365 E5 subscription and anAzure subscription.All the on-premises servers in the perimeter network are prevented from connecting directly to theinternet.The customer recently recovered from a ransomware attack.The customer plans to deploy Microsoft Sentinel.You need to recommend configurations to meet the following requirements:Ensure that the security operations team can access the security logs and the operation logs.Ensure that the IT operations team can access only the operations logs, including the event logs ofthe servers in the perimeter network.Which two configurations can you include in the recommendation? Each correct answer presents acomplete solution. NOTE: Each correct selection is worth one point. 

You have a Microsoft 365 subscription that contains 500 users. Each user is assigned a Microsoft 365 E5 license and uses a Windows device. Microsoft Purview data loss prevention (DLP) policies are applied to Microsoft Exchange Online email and SharePoint Online sites. You plan to monitor the usage of third-party generative Al apps by using Microsoft Purview Data Security Posture Management for Al (DSPM for Al). What should you do first?  

You have an on-premises server named Server 1. Server1 is an FTP server that can be accessed by only theusers at your company.You have an Azure subscription.You need to recommend a Zero Trust Network Access (ZTNA) solution to enforce Conditional Accesspolicies when users access Server1 from the internet.What should you include in the recommendation?

You have a Microsoft 365 E5 subscription.

You need to recommend a solution to add a watermark to email attachments that contain sensitive data.

What should you include in the recommendation?

You have an Azure subscription that contains multiple apps. The apps are deployed by using continuousintegration and continuous delivery (CI/CD) pipelines in Azure DevOps.You need to integrate static application security testing (SAST) and security smoke testing into the pipelinesbased on Microsoft Cloud Adoption Framework for Azure principles.At which stage of the CI/CID process should each type of test be integrated? To answer, select the appropriateoptions in the answer area. NOTE: Each correct selection is worth one point.Please review the explanation below to find the correct answer.Do you know the answer?