2024년 6월 업데이트된 프리미엄 SC-100 시험 엔진 pdf - 무료 업데이트된 176 문제 [Q27-Q50] 다운로드

게시 날짜 6월 17, 2024

이 게시물 평가하기

Updated Jun-2024 Premium SC-100 Exam Engine pdf – Download Free Updated 176 Questions

Authentic SC-100 Dumps With 100% Passing Rate Practice Tests Dumps

Microsoft SC-100 exam is a part of the Microsoft Certified: Security, Compliance, and Identity Fundamentals certification. Microsoft Cybersecurity Architect certification is ideal for professionals who are new to the field of cybersecurity and want to gain a fundamental understanding of the concepts and practices involved in securing digital assets.

Q27. You are designing the encryption standards for data at rest for an Azure resource You need to provide recommendations to ensure that the data at rest is encrypted by using AES-256 keys. The solution must support rotating the encryption keys monthly.
Solution: For blob containers in Azure Storage, you recommend encryption that uses Microsoft-managed keys within an encryption scope.
이것이 목표에 부합하나요?

예

아니요

설명
https://docs.microsoft.com/en-us/azure/key-vault/keys/how-to-configure-key-rotation

Q28. You are designing the security standards for containerized applications onboarded to Azure. You are evaluating the use of Microsoft Defender for Containers.
In which two environments can you use Defender for Containers to scan for known vulnerabilities? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

Linux containers deployed to Azure Container Registry

Linux containers deployed to Azure Kubernetes Service (AKS)

Windows containers deployed to Azure Container Registry

Windows containers deployed to Azure Kubernetes Service (AKS)

Linux containers deployed to Azure Container Instances

https://docs.microsoft.com/en-us/learn/modules/design-strategy-for-secure-paas-iaas-saas-services/9-specify-security-requirements-for-containers
https://docs.microsoft.com/en-us/azure/defender-for-cloud/defender-for-containers-introduction#view-vulnerabilities-for-running-images
Topic 2, Fabrikam, Inc
On-premises Environment
The on-premises network contains a single Active Directory Domain Services (AD DS) domain named corp.fabrikam.com.
Azure Environment
Fabrikam has the following Azure resources:
* An Azure Active Directory (Azure AD) tenant named fabrikam.onmicrosoft.com that syncs with corp.fabnkam.com
* A single Azure subscription named Sub1
* A virtual network named Vnet1 in the East US Azure region
* A virtual network named Vnet2 in the West Europe Azure region
* An instance of Azure Front Door named FD1 that has Azure Web Application Firewall (WAR enabled
* A Microsoft Sentinel workspace
* An Azure SQL database named ClaimsDB that contains a table named ClaimDetails
* 20 virtual machines that are configured as application servers and are NOT onboarded to Microsoft Defender for Cloud
* A resource group named TestRG that is used for testing purposes only
* An Azure Virtual Desktop host pool that contains personal assigned session hosts All the resources in Sub1 are in either the East US or the West Europe region.
파트너
Fabrikam has contracted a company named Contoso, Ltd. to develop applications. Contoso has the following infrastructure-.
* An Azure AD tenant named contoso.onmicrosoft.com
* An Amazon Web Services (AWS) implementation named ContosoAWS1 that contains AWS EC2 instances used to host test workloads for the applications of Fabrikam Developers at Contoso will connect to the resources of Fabrikam to test or update applications. The developers will be added to a security Group named Contoso Developers in fabrikam.onmicrosoft.com that will be assigned to roles in Sub1.
The ContosoDevelopers group is assigned the db.owner role for the ClaimsDB database.
Compliance Event
Fabrikam deploys the following compliance environment:
* Defender for Cloud is configured to assess all the resources in Sub1 for compliance to the HIPAA HITRUST standard.
* Currently, resources that are noncompliant with the HIPAA HITRUST standard are remediated manually.
* Qualys is used as the standard vulnerability assessment tool for servers.
Problem Statements
The secure score in Defender for Cloud shows that all the virtual machines generate the following recommendation-. Machines should have a vulnerability assessment solution.
All the virtual machines must be compliant in Defender for Cloud.
ClaimApp Deployment
Fabrikam plans to implement an internet-accessible application named ClaimsApp that will have the following specification
* ClaimsApp will be deployed to Azure App Service instances that connect to Vnetl and Vnet2.
* Users will connect to ClaimsApp by using a URL of https://claims.fabrikam.com.
* ClaimsApp will access data in ClaimsDB.
* ClaimsDB must be accessible only from Azure virtual networks.
* The app services permission for ClaimsApp must be assigned to ClaimsDB.
Application Development Requirements
Fabrikam identifies the following requirements for application development:
* Azure DevTest labs will be used by developers for testing.
* All the application code must be stored in GitHub Enterprise.
* Azure Pipelines will be used to manage application deployments.
* All application code changes must be scanned for security vulnerabilities, including application code or configuration files that contain secrets in clear text. Scanning must be done at the time the code is pushed to a repository.
Security Requirement
Fabrikam identifies the following security requirements:
* Internet-accessible applications must prevent connections that originate in North Korea.
* Only members of a group named InfraSec must be allowed to configure network security groups (NSGs} and instances of Azure Firewall, VJM. And Front Door in Sub1.
* Administrators must connect to a secure host to perform any remote administration of the virtual machines. The secure host must be provisioned from a custom operating system image.
AWS Requirements
Fabrikam identifies the following security requirements for the data hosted in ContosoAWSV.
* Notify security administrators at Fabrikam if any AWS EC2 instances are noncompliant with secure score recommendations.
* Ensure that the security administrators can query AWS service logs directly from the Azure environment.
Contoso Developer Requirements
Fabrikam identifies the following requirements for the Contoso developers;
* Every month, the membership of the ContosoDevelopers group must be verified.
* The Contoso developers must use their existing contoso.onmicrosoft.com credentials to access the resources in Sub1.
* The Comoro developers must be prevented from viewing the data in a column named MedicalHistory in the ClaimDetails table.
Compliance Requirement
Fabrikam wants to automatically remediate the virtual machines in Sub1 to be compliant with the HIPPA HITRUST standard. The virtual machines in TestRG must be excluded from the compliance assessment.

Q29. Your company wants to optimize using Azure to protect its resources from ransomware.
You need to recommend which capabilities of Azure Backup and Azure Storage provide the strongest protection against ransomware attacks. The solution must follow Microsoft Security Best Practices.
어떤 것을 추천하나요? 답변하려면 답변 영역에서 적절한 옵션을 선택하세요.
참고: 정답을 선택할 때마다 1점의 가치가 있습니다.

Q30. Your company plans to deploy several Azure App Service web apps. The web apps will be deployed to the West Europe Azure region. The web apps will be accessed only by customers in Europe and the United States.
You need to recommend a solution to prevent malicious bots from scanning the web apps for vulnerabilities.
The solution must minimize the attach surface.
추천에 어떤 내용을 포함해야 하나요?

Azure Firewall Premium

Azure Application Gateway Web Application Firewall (WAF)

network security groups (NSGs)

Azure Traffic Manager and application security groups

https://docs.microsoft.com/en-us/azure/web-application-firewall/ag/bot-protection

Q31. Your company plans to move all on-premises virtual machines to Azure. A network engineer proposes the Azure virtual network design shown in the following table.

You need to recommend an Azure Bastion deployment to provide secure remote access to all the virtual machines. Based on the virtual network design, how many Azure Bastion subnets are required?

Q32. Your company is preparing for cloud adoption.
You are designing security for Azure landing zones.
Which two preventative controls can you implement to increase the secure score? Each NOTE: Each correct selection is worth one point.

Azure Firewall

Azure Web Application Firewall (WAF)

Microsoft Defender for Cloud alerts

Azure Active Directory (Azure AD Privileged Identity Management (PIM)

Microsoft Sentinel

Q33. Litware의 Azure AD 테넌트에 대한 ID 보안 솔루션을 추천해야 합니다. 솔루션은 ID 요구 사항 및 규정 준수 요구 사항을 충족해야 합니다.
어떤 것을 추천하나요? 답변하려면 답변 영역에서 적절한 옵션을 선택하세요.
참고: 정답을 선택할 때마다 1점의 가치가 있습니다.

Q34. 회사에서 클라우드용 Microsoft Defender 및 Microsoft Sentinel을 사용합니다. 이 회사는 다음 그림에 표시된 아키텍처를 갖춘 애플리케이션을 설계하고 있습니다.

제안된 아키텍처를 위한 로깅 및 감사 솔루션을 설계하고 있습니다. 솔루션은 다음 요구 사항을 충족해야 합니다.
* Azure WAF(웹 애플리케이션 방화벽) 로그를 Microsoft Sentinel과 통합합니다.
* 클라우드용 Defender를 사용하여 가상 머신의 알림을 검토하세요.
솔루션에 무엇을 포함해야 하나요? 답은 답안에서 적절한 옵션을 선택하십시오. 참고: 정답을 선택할 때마다 1점의 가치가 있습니다.

Q35. You have an Azure subscription that has Microsoft Defender for Cloud enabled. You have an Amazon Web Services (AWS) implementation.
You plan to extend the Azure security strategy to the AWS implementation. The solution will NOT use Azure Arc. Which three services can you use to provide security for the AWS resources? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

Azure Active Directory (Azure AD) Privileged Identity Management (PIM)

Azure Active Directory (Azure AD) Conditional Access

Microsoft Defender for servers

Azure 정책

Microsoft Defender for Containers

Q36. You are designing a security operations strategy based on the Zero Trust framework.
You need to minimize the operational load on Tier 1 Microsoft Security Operations Center (SOC) analysts.
어떻게 해야 하나요?

Enable built-in compliance policies in Azure Policy.

Enable self-healing in Microsoft 365 Defender.

Automate data classification.

Create hunting queries in Microsoft 365 Defender.

Q37. You need to recommend a solution to meet the requirements for connections to ClaimsDB.
What should you recommend using for each requirement? To answer, select the appropriate options in the answer area.
참고: 정답을 선택할 때마다 1점의 가치가 있습니다.

Q38. 클라우드용 Microsoft Defender를 사용하도록 설정한 Azure 구독이 있습니다. ISO를 적용해야 합니다.
구독에 대한 2700V2013 표준. 솔루션은 규정을 준수하지 않는 리소스가 자동으로 수정되도록 보장해야 합니다. 어떤 솔루션을 사용해야 하나요?

클라우드용 Defender의 규정 준수 대시보드

Azure 정책

Azure 블루프린트

Azure 역할 기반 액세스 제어(Azure RBAC)

https://azure.microsoft.com/en-us/blog/simplifying-your-environment-setup-while-meeting-compliance-needs-w

Q39. You are creating the security recommendations for an Azure App Service web app named App1.
App1 has the following specifications:
* Users will request access to App1 through the My Apps portal. A human resources manager will approve the requests.
* Users will authenticate by using Azure Active Directory (Azure AD) user accounts.
You need to recommend an access security architecture for App1.
추천에 무엇을 포함해야 하나요? 답은 다음 중 적절한 옵션을 선택하십시오. 참고: 정답을 선택할 때마다 1점의 가치가 있습니다.

Q40. You need to recommend a solution to meet the compliance requirements.
어떤 것을 추천하나요? 답변하려면 답변 영역에서 적절한 옵션을 선택하세요.
참고: 정답을 선택할 때마다 1점의 가치가 있습니다.

Q41. A customer follows the Zero Trust model and explicitly verifies each attempt to access its corporate applications.
The customer discovers that several endpoints are infected with malware.
The customer suspends access attempts from the infected endpoints.
The malware is removed from the end point.
Which two conditions must be met before endpoint users can access the corporate applications again? Each correct answer presents part of the solution.
참고: 정답을 선택할 때마다 1점의 가치가 있습니다.

Microsoft Defender for Endpoint reports the endpoints as compliant.

Microsoft Intune reports the endpoints as compliant.

A new Azure Active Directory (Azure AD) Conditional Access policy is enforced.

The client access tokens are refreshed.

설명
https://www.microsoft.com/security/blog/2022/02/17/4-best-practices-to-implement-a-comprehensive-zero-trust-
https://docs.microsoft.com/en-us/azure/active-directory/develop/refresh-tokens

Q42. Litware의 Azure AD 테넌트에 대한 ID 보안 솔루션을 추천해야 합니다. 솔루션은 ID 요구 사항 및 규정 준수 요구 사항을 충족해야 합니다.
어떤 것을 추천하나요? 답변하려면 답변 영역에서 적절한 옵션을 선택하세요.
참고: 정답을 선택할 때마다 1점의 가치가 있습니다.

Q43. You need to recommend a strategy for App Service web app connectivity. The solution must meet the landing zone requirements. What should you recommend? To answer, select the appropriate options in the answer are a. NOTE Each correct selection is worth one point.

Q44. You are designing the encryption standards for data at rest for an Azure resource You need to provide recommendations to ensure that the data at rest is encrypted by using AES-256 keys. The solution must support rotating the encryption keys monthly.
Solution: For blob containers in Azure Storage, you recommend encryption that uses customer-managed keys (CMKs).
이것이 목표에 부합하나요?

예

아니요

Q45. Microsoft 365 E5를 구독하고 있습니다.
You need to recommend a solution to add a watermark to email attachments that contain sensitive dat a. What should you include in the recommendation?

Microsoft Defender for Cloud Apps

insider risk management

Microsoft Information Protection

Azure Purview

https://docs.microsoft.com/en-us/microsoft-365/compliance/sensitivity-labels?view=o365-worldwide You can use sensitivity labels to: Provide protection settings that include encryption and content markings. For example, apply a “Confidential” label to a document or email, and that label encrypts the content and applies a “Confidential” watermark. Content markings include headers and footers as well as watermarks, and encryption can also restrict what actions authorized people can take on the content. Protect content in Office apps across different platforms and devices. Supported by Word, Excel, PowerPoint, and Outlook on the Office desktop apps and Office on the web. Supported on Windows, macOS, iOS, and Android. Protect content in third-party apps and services by using Microsoft Defender for Cloud Apps. With Defender for Cloud Apps, you can detect, classify, label, and protect content in third-party apps and services, such as SalesForce, Box, or DropBox, even if the third-party app or service does not read or support sensitivity labels.

Q46. Your company is migrating data to Azure. The data contains Personally Identifiable Information (Pll). The company plans to use Microsoft Information Protection for the Pll data store in Azure. You need to recommend a solution to discover Pll data at risk in the Azure resources.
추천에 무엇을 포함해야 하나요? 답은 다음 중 적절한 옵션을 선택하십시오. 참고: 정답을 선택할 때마다 1점의 가치가 있습니다.

Q47. Your company finalizes the adoption of Azure and is implementing Microsoft Defender for Cloud.
You receive the following recommendations in Defender for Cloud
* Access to storage accounts with firewall and virtual network configurations should be restricted,
* Storage accounts should restrict network access using virtual network rules.
* Storage account should use a private link connection.
* Storage account public access should be disallowed.
You need to recommend a service to mitigate identified risks that relate to the recommendations. What should you recommend?

Azure Storage Analytics

Azure Network Watcher

Microsoft Sentinel

Azure 정책

https://docs.microsoft.com/en-us/azure/defender-for-cloud/security-policy-concept
https://docs.microsoft.com/en-us/security/benchmark/azure/baselines/storage-security-baseline

Q48. You use Azure Pipelines with Azure Repos to implement continuous integration and continuous deployment (CI/CO) workflows.
You need to recommend best practices to secure the stages of the CI/CD workflows based on the Microsoft Cloud Adoption Framework for Azure.
What should you include in the recommendation for each stage? To answer, select the appropriate options in the answer area.
참고: 정답을 선택할 때마다 1점의 가치가 있습니다.

Q49. Your company is migrating data to Azure. The data contains Personally Identifiable Information (Pll). The company plans to use Microsoft Information Protection for the Pll data store in Azure. You need to recommend a solution to discover Pll data at risk in the Azure resources.
추천에 무엇을 포함해야 하나요? 답은 다음 중 적절한 옵션을 선택하십시오. 참고: 정답을 선택할 때마다 1점의 가치가 있습니다.

Q50. You are evaluating the security of ClaimsApp.
다음 각 진술에 대해 해당 진술이 사실이면 예를 선택합니다. 그렇지 않으면 아니요를 선택합니다.
NOTE; Each correct selection is worth one point.

로드 중 …

Microsoft SC-100 Exam is ideal for those who are looking to pursue a career in cybersecurity and want to validate their skills and knowledge with an industry-recognized certification. SC-100 exam is also suitable for professionals who are already working in cybersecurity and want to enhance their knowledge and skills in Microsoft security technologies and solutions. By passing the Microsoft SC-100 Exam, individuals can demonstrate their ability to design and implement secure solutions using Microsoft security technologies.

Verified Pass SC-100 Exam in First Attempt Guaranteed: https://www.passtestking.com/Microsoft/SC-100-practice-exam-dumps.html

카테고리:SC-100Microsoft