SC-100 Exam Preparation Material | Microsoft Cybersecurity Architect

Your company has a hybrid cloud infrastructure that contains an on-premises Active Directory Domain Services (AD DS) forest, a Microsoft 365 subscription, and an Azure subscription.
The company's on-premises network contains internal web apps that use Kerberos authentication. Currently, the web apps are accessible only from the network.
You have remote users who have personal devices that run Windows 11.
You need to recommend a solution to provide the remote users with the ability to access the web apps .
The solution must meet the following requirements:
✑ Prevent the remote users from accessing any other resources on the network.
✑ Support Azure Active Directory (Azure AD) Conditional Access.
✑ Simplify the end-user experience.
What should you include in the recommendation?

You have a Microsoft 365 subscription and an Azure subscription. Microsoft 365 Defender and Microsoft Defender for Cloud are enabled.
The Azure subscription contains 50 virtual machines. Each virtual machine runs different applications on Windows Server 2019. You need to recommend a solution to ensure that only authorized applications can run on the virtual machines. If an unauthorized application attempts to run or be installed, the application must be blocked automatically until an administrator authorizes the application.
Which security control should you recommend?

HOTSPOT
You have an Azure subscription. The subscription contains an Azure SQL database named DB1 that stores customer data.
You have a Microsoft 365 subscription that uses Microsoft SharePoint Online, OneDrive, and Teams.
Users frequently create Microsoft Office documents that contain data from DB1.
You need to recommend a Microsoft Purview solution that meets the following requirements:
• Identifies Office documents that contain customer addresses and phone numbers sourced from DB1
• Generates an alert if a user downloads an above average number of files that contain data from DB1
• Minimizes the number of false positives
What should you include in the solution for each requirement? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

HOTSPOT
You have a Microsoft 365 E5 subscription that uses Microsoft Teams.
Your company has an investment department and a research department. Each department has a compliance team.
You are designing a Microsoft Purview Information Barriers (IBs) solution to restrict communication between the departments .
The solution must meet the following requirements:
• The employees in each department must only be able to communicate with the employees in their respective department.
• The employees on the compliance team of each department must be able to communicate with the employees on the compliance team of the other department.
What is the minimum number of segments and IB policies required? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Your company is developing a serverless application in Azure that will have the architecture shown in the following exhibit.



You need to recommend a solution to isolate the compute components on an Azure virtual network.
What should you include in the recommendation?