Design a Resiliency Strategy for Ransomware and Other Attacks Based on Microsoft Security Best Practices SC-100 Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A healthcare organization is defining its business resiliency goals. The CIO wants to prioritize protection for the electronic health record (EHR) system because it is required for patient care and regulatory compliance. The security team must identify which threats pose the highest risk to the EHR system. Which approach should the team take?

   • AImplement the latest security updates on all EHR servers to eliminate the risk of ransomware.
   • BDeploy a data loss prevention (DLP) policy to prevent unauthorized access to patient records.
   • CPerform a business impact analysis (BIA) to quantify the impact of losing the EHR system and identify the threats that could cause that loss.
   • DConduct a penetration test against the EHR system to find exploitable vulnerabilities.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   When prioritizing threats to business-critical assets for a resiliency strategy, which factor should be considered FIRST?

   • AThe asset's criticality to core business operations
   • BThe asset's age and depreciation value
   • CThe number of security tools already deployed in the environment
   • DThe cost of the security controls that would protect the asset
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A manufacturing company has a mix of Windows 10 and Windows 11 devices, some of which are used on the factory floor and cannot be rebooted during production hours. The security team needs to ensure that security updates are applied effectively without disrupting production. What should they do?

   • AUse Windows Update for Business deployment rings, with the factory floor devices in a ring that defers updates and allows scheduling during maintenance windows.
   • BDisable Windows Update on factory floor devices to avoid any disruption.
   • CUse Microsoft Endpoint Configuration Manager to deploy updates only to office devices, leaving factory floor devices unpatched.
   • DConfigure Windows Update to automatically download and install updates immediately for all devices.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A company uses Windows Server Update Services (WSUS) to manage updates for its on-premises servers. They want to ensure that security updates are applied promptly to reduce the risk of ransomware. What should they do?

   • AConfigure WSUS to require manual approval for all updates.
   • BConfigure WSUS to only approve updates after 30 days of testing.
   • CConfigure WSUS to auto-approve security updates and set a deadline for installation within 7 days.
   • DUse WSUS to deploy updates only to non-production servers.
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   Which factor is MOST important when evaluating whether a security update should be deployed immediately?

   • AThe update is recommended by a third-party vendor
   • BThe update has been available for more than a month
   • CThe update is available for all operating systems
   • DThe update addresses a vulnerability that is being actively exploited in the wild
   Reveal Solution Discussion Select an answer first