Microsoft Updated SC-100 Exam Questions and Answers by caelan

Box 1: Virtual Network Integration - correct

Virtual network integration gives your app access to resources in your virtual network, but it doesn't grant inbound private access to your app from the virtual network.

Box 2: Private Endpoints. - correct

You can use Private Endpoint for your Azure Web App to allow clients located in your private network to securely access the app over Private Link.

https://docs.microsoft.com/en-us/azure/active-directory/conditio nal-access/concept-conditional-access-session#conditional-access-application-control

https://docs.microsoft.com/en-us/azure/active -directory/app-proxy/application-proxy-integrate-with-microsoft-cloud-application-security

Segment Microsoft Sentinel workspaces by: Region and Azure AD tenant

Lighthouse subscription

One of the stipulations is to meet the business requirements of minimizing costs. ExpressRoute is expensive.

Given the landing zone requirements of

1) "Use a DNS namespace of litware.com"

2) "Ensure that the Azure virtual machines in each landing zone communicate with Azure App Service web apps in the same zone over the Microsoft backbone network, rather than over public endpoints"