Month End Special - 75% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: big75certs

Download Latest SC-100 Questions

Page: 2 / 12
Total 310 questions

Microsoft Cybersecurity Architect Questions and Answers

Question 5

Your company has a main office and 10 branch offices. Each branch office contains an on-premises file server that runs Windows Server and multiple devices that run either Windows 11 or macOS. The devices are enrolled in Microsoft Intune.

You have a Microsoft Entra tenant.

You need to deploy Global Secure Access to implement web filtering for device traffic to the internet The solution must ensure that all the web traffic from the devices in the branch offices is controlled by using Global Secure Access.

What should you do first in each branch office?

Options:

A.

Configure an Intune policy to deploy the Global Secure Access client to each device.

B.

Configure an IPsec tunnel on the router.

C.

Install the Microsoft Entra private network connector on the file server.

D.

Configure an Intune policy to onboard Microsoft Defender for Endpoint to each device.

Question 6

Your company is developing a modern application that will run as an Azure App Service web app. You plan to perform threat modeling to identify potential security issues by using the Microsoft Threat Modeling Tool. Which type of diagram should you create?

Options:

A.

data flow

B.

system flow

C.

process flow

D.

network flow

Question 7

You have a Microsoft Entra tenant named contoso.com.

You have an external partner that has a Microsoft Entra tenant named fabrikam.com.

You need to recommend an identity governance solution for contoso.com that meets the following requirements:

    Enables the users in contoso.com and fabrikam.com to communicate by using shared Microsoft Teams channels.

    Manages access to shared Teams channels in contoso.com by using groups in fabrikam.com.

    Supports single sign-on (SSO).

    Minimizes administrative effort.

    Maximizes security.

What should you include in the recommendation?

Options:

A.

Microsoft Entra B2B collaboration

B.

Microsoft Entra Connect Sync

C.

Cross-tenant synchronization

D.

B2B direct connect

Question 8

Your company plans to evaluate the security of its Azure environment based on the principles of the Microsoft Cloud Adoption Framework for Azure.

You need to recommend a cloud-based service to evaluate whether the Azure resources comply with the National Institute of Standards and Technology (NIST) Cybersecurity Framework (CSF).

What should you recommend?

Options:

A.

Compliance Manager in Microsoft Purview

B.

Microsoft Defender for Cloud

C.

Microsoft Sentinel

D.

Microsoft Defender for Cloud Apps

Page: 2 / 12
Total 310 questions