Question 1

You are designing the encryption standards for data at rest for an Azure resource

You need to provide recommendations to ensure that the data at rest is encrypted by using AES-256

keys. The solution must support rotating the encryption keys monthly.

Solution: For Azure SQL databases, you recommend Transparent Data Encryption (TDE) that uses customer-managed keys (CMKs).

Does this meet the goal?

Options :

A : Yes

B : No

Answer: B

Question 2

Your company has a main office and 10 branch offices. Each branch office contains an on-premises

file server that runs Windows Server and multiple devices that run either Windows 11 or macOS. The

devices are enrolled in Microsoft Intune.

You have a Microsoft Entra tenant.

You need to deploy Global Secure Access to implement web filtering for device traffic to the internet

The solution must ensure that all the web traffic from the devices in the branch offices is controlled

by using Global Secure Access.

What should you do first in each branch office?

Options :

A : Configure an Intune policy to deploy the Global Secure Access client to each device

B : Configure an IPsec tunnel on the router.

C : Install the Microsoft Entra private network connector on the file server.

D : Configure an Intune policy to onboard Microsoft Defender for Endpoint to each device.

Answer: B

Question 3

You need to recommend a solution to resolve the virtual machine issue. What should you include in the recommendation? (Choose Two)

Options :

A : Onboard the virtual machines to Microsoft Defender for Endpoint.

B : Onboard the virtual machines to Azure Arc.

C : Create a device compliance policy in Microsoft Endpoint Manager.

D : Enable the Qualys scanner in Defender for Cloud.

Answer: A,D

Question 4

Your company develops several applications that are accessed as custom enterprise applications in Azure Active Directory (Azure AD). You need to recommend a solution to prevent users on a specific list of countries from connecting to the applications. What should you include in the recommendation?

Options :

A : activity policies in Microsoft Defender for Cloud Apps

B : sign-in risk policies in Azure AD Identity Protection

C : device compliance policies in Microsoft Endpoint Manager

D : Azure AD Conditional Access policies

E : user risk policies in Azure AD Identity Protection

Answer: A

Question 5

Your company has devices that run either Windows 10, Windows 11, or Windows Server.

You are in the process of improving the security posture of the devices.

You plan to use security baselines from the Microsoft Security Compliance Toolkit.

What should you recommend using to compare the baselines to the current device configurations?

Options :

A : Microsoft Intune

B : Policy Analyzer

C : Local Group Policy Object (LGPO)

D : Windows Autopilot

Answer: B

Higher Test Marks with Free Online SC-100 Exam Practice

Buying Options: