Microsoft Cybersecurity Architect Exam (SC-100) - Microsoft Exam Questions

HOTSPOT You have an Azure subscription. You need to use a federated model in Azure API Management to control access to your organization's

APIs. The solution must meet the following requirements:

• Support the use of role-based access control (RBAC) to manage the APIs.

• Support the use of keys to control the consumption of the APIs.
To which scope should you associate each control method? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Your company has a main office and a branch office. The main office contains 20 on-premises servers that run Windows Server and host apps that are published by using Microsoft Entra application proxy. The main office contains 500 on-premises computers that run Windows 11. The branch office contains 100 on-premises computers that run Windows 11. All the main office computers are enrolled in Microsoft Intune. The branch office computers are NOT enrolled in Intune. You have a Microsoft 365 E5 subscription. You have a Microsoft Entra tenant. You have a third-party software as a service (SaaS) app that is registered in the Microsoft Entra tenant. You plan to implement Global Secure Access. You are evaluating the use of compliant network check and Conditional Access.

Which two scenarios are supported by compliant network check? Each correct answer presents a complete solution.

NOTE: Each correct selection is worth one point

You are designing the security standards for containerized applications onboarded to Azure. You are evaluating the use of Microsoft Defender for Containers. In which two environments can you use Defender for Containers to scan for known vulnerabilities? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

HOTSPOT Your company plans to follow DevSecOps best practices of the Microsoft Cloud Adoption Framework
for Azure to integrate DevSecOps processes into continuous integration and continuous deployment
(Cl/CD) DevOps pipelines You need to recommend which security-related tasks to integrate into each stage of the DevOps pipelines.

What should recommend? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

HOTSPOT What should you create in Azure AD to meet the Contoso developer requirements?