SC-100 무료 덤프문제 온라인 액세스

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure subscription that has Microsoft Defender for Cloud enabled.
You are evaluating the Azure Security Benchmark V3 report.
In the Secure management ports controls, you discover that you have 0 out of a potential 8 points.
You need to recommend configurations to increase the score of the Secure management ports controls.
Solution: You recommend enabling the VMAccess extension on all virtual machines.
Does this meet the goal?

• A.Yes
• B.No

You need to recommend a multi-tenant and hybrid security solution that meets to the business requirements and the hybrid requirements. What should you recommend? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

정답:

Explanation:

For a Microsoft cloud environment, you are designing a security architecture based on the Microsoft Cloud Security Benchmark.
What are three best practices for identity management based on the Azure Security Benchmark? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.

• A.Use a centralized identity and authentication system.
• B.Manage the lifecycle of identities and entitlements
• C.Enable threat detection for identity and access management.
• D.Protect identity and authentication systems.
• E.Manage application identities securely and automatically.

You are designing the security standards for containerized applications onboarded to Azure. You are evaluating the use of Microsoft Defender for Containers.
In which two environments can you use Defender for Containers to scan for known vulnerabilities? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

• A.Linux containers deployed to Azure Container Instances
• B.Windows containers deployed to Azure Kubernetes Service (AKS)
• C.Windows containers deployed to Azure Container Registry
• D.Linux containers deployed to Azure Container Registry
• E.Linux containers deployed to Azure Kubernetes Service (AKS)

You have a Microsoft Entra tenant named contoso.com and use Microsoft Intune. Each user in contoso.com has a Microsoft Entra ID P1 license and a Windows 11 device that has the Global Secure Access client deployed.
You plan to deploy the following configuration of Microsoft Entra Internet Access:
* Enable a baseline profile.
* Create a security profile named Profile` that has a priority of 300 and contains a single web content filtering policy named WCFPolicy configure WCFPolicy1 as follows:
o Set Action to allow.
o Include a single rule that has a fully qualified domain name (FQDN) destination of '. adatum.com.
* Link Profile1 to a Conditional Access policy named CAPolicy1, apply CAPolicy1 to all users, and grant access unless a user ' s device is noncompliant You need to evaluate the impact of the planned deployment on traffic to the following resources:
* https://www.adatum.com:8433
* https://www.fabrikam.com
Which two traffic scenarios will occur? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point

• A.Traffic to https://www.adatum.com:8433 will be allowed from compliant devices only.
• B.Traffic to https://www.fabrikam.com will be blocked from noncompliant devices only.
• C.Traffic to https://www.fabrikam.com will be allowed from all the devices.
• D.Traffic to https://www.fabrikam.com will be allowed from compliant devices only.
• E.Traffic to https://www.adatum.com:8433 will be blocked from all the devices.
• F.Traffic to https://www.adatumxom:8433 will be allowed from all the devices.