Microsoft certsexpert microsoft Certified: Cybersecurity Architect Expert Sc-100 Microsoft Study Notes by Ava-mae q70 vce pdf

Page: 6 / 12

Exam Name:	Microsoft Cybersecurity Architect
Exam Code:	SC-100 Dumps
Vendor:	Microsoft	Certification:	Microsoft Certified: Cybersecurity Architect Expert
Questions:	296 Q&A's	Shared By:	ava-mae

Question 24

You have a Microsoft 365 tenant.

You have an Azure subscription that contains Azure App Service web apps. The apps have the following characteristics:

• The apps use third-party and open-source components.

• The apps were developed by using C#, Python, and Java.

• The app deployment process is managed by using Azure DevOps.

• The source code for the apps is stored in GitHub Enterprise Cloud repositories and protected by using GitHub Advanced Security.

You need to reduce the risk of supply chain attacks during the application lifecycle.

What should you implement?

Options:

NuGet Audit

secret scanning

Dependabot alerts

app governance in Microsoft Defender for Cloud Apps

Discussion

Question 25

Your company wants to optimize using Azure to protect its resources from ransomware.

You need to recommend which capabilities of Azure Backup and Azure Storage provide the strongest protection against ransomware attacks. The solution must follow Microsoft Security Best Practices.

What should you recommend? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Questions 25

Options:

Discussion

Question 26

A customer has a hybrid cloud infrastructure that contains a Microsoft 365 E5 subscription and an Azure subscription.

All on-premises Windows servers in the perimeter network are prevented from connecting directly to the internet.

The customer recently recovered from a tansomware attack.

The customer plans to deploy Microsoft Sentinel.

You need to recommend solutions to meet the following requirements:

• Ensure that the security operations team can access the security logs and the operation logs.

• Ensure that the IT operations team can access only the operations logs, including the event logs of the servers in the perimeter network.

Which two solutions should you include in the recommendation? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

Options:

the Azure Monitor agent

Microsoft Entra Conditional Access policies

Windows Server event subscription

resource-based role-based access control (RBAC)

Discussion

Conor

I recently used these dumps for my exam and I must say, I was impressed with their authentic material.

Yunus Jun 3, 2026

Exactly…….The information in the dumps is so authentic and up-to-date. Plus, the questions are very similar to what you'll see on the actual exam. I felt confident going into the exam because I had studied using Cramkey Dumps.

Stefan

Thank you so much Cramkey I passed my exam today due to your highly up to date dumps.

Ocean Jun 20, 2026

Agree….Cramkey Dumps are constantly updated based on changes in the exams. They also have a team of experts who regularly review the materials to ensure their accuracy and relevance. This way, you can be sure you're studying the most up-to-date information available.

Vienna

I highly recommend them. They are offering exact questions that we need to prepare our exam.

Jensen Jun 14, 2026

That's great. I think I'll give Cramkey a try next time I take a certification exam. Thanks for the recommendation!

Inaya

Passed the exam. questions are valid. The customer support is top-notch. They were quick to respond to any questions I had and provided me with all the information I needed.

Cillian Jun 21, 2026

That's a big plus. I've used other dump providers in the past and the customer support was often lacking.

Question 27

Your company develops several applications that are accessed as custom enterprise applications in Azure Active Directory (Azure AD). You need to recommend a solution to prevent users on a specific list of countries from connecting to the applications. What should you include in the recommendation?

Options:

activity policies in Microsoft Defender for Cloud Apps

sign-in risk policies in Azure AD Identity Protection

device compliance policies in Microsoft Endpoint Manager

Azure AD Conditional Access policies

user risk policies in Azure AD Identity Protection