A company uses Azure Backup to protect its Azure VMs. They want to ensure that backups are not affected by a ransomware attack that encrypts the production VMs. What should they implement?

Store backups in the same Recovery Services vault as the production VMs.

Use Azure Site Recovery to replicate VMs to a secondary region.

Use Azure Policy to prevent deletion of the Recovery Services vault.

Store backups in a separate Recovery Services vault with soft delete and multi-user authorization enabled.

In a ransomware mitigation strategy, why is it important to have a well-tested backup and restore plan?

To ensure that the organization can recover data without paying the ransom

To satisfy insurance requirements only

To eliminate the need for security controls

To guarantee that no data is ever lost

A company uses Microsoft Defender for Cloud to assess the security posture of its Azure resources. They want to ensure that security updates are applied to all VMs. What should they implement?

Use Azure Policy to automatically deploy updates to all VMs.

Use Azure Automation to run a script that installs updates on all VMs.

Use Azure Update Management to schedule updates and monitor compliance.

Use Microsoft Defender for Cloud's regulatory compliance dashboard to track update status.

A company uses Microsoft Intune to manage its Windows devices. The security team wants to ensure that security updates are applied to all devices within 7 days of release, but they also want to avoid issues by testing updates first. What should they configure?

Set all devices to the 'Semi-Annual Channel' and defer updates by 30 days.

Create multiple update rings in Windows Update for Business, starting with a pilot ring for testing, then rolling out to broader rings over 7 days.

Configure Windows Update for Business to automatically install updates without any deferral.

Use Microsoft Endpoint Configuration Manager to deploy updates only to pilot devices.

A company uses Azure Backup to protect its Azure VMs. They want to ensure that backups are immutable and cannot be deleted by ransomware or a malicious insider. They also want to retain backups for 7 years for compliance. What should they configure?

Store backups in a storage account with a private endpoint and enable Azure Defender for Storage.

Use Azure Backup with a custom policy that includes a 7-year retention and enable the immutable vault setting.

Use Azure Site Recovery to replicate VMs to a secondary region and retain the replicated data for 7 years.

Enable soft delete and set the retention period to 7 years.

Microsoft Certified:Cybersecurity Architect Expert

Domain 1Objective 1

Design a Resiliency Strategy for Ransomware and Other Attacks Based on Microsoft Security Best Practices SC-100 Practice Questions (Page 2)

Part of the Design solutions that align with security best practices and priorities domain, which accounts for 20–25% of the SC-100 exam. Microsoft does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–20 in this domain), expect 3–7 from this objective — we provide 31 practice questions to prepare you well beyond it. (estimate)

31questions here

7free pages

5concepts

20–25%of the exam

Questions 6–10

6application · medium
A company uses Azure Backup to protect its Azure VMs. They want to ensure that backups are not affected by a ransomware attack that encrypts the production VMs. What should they implement?
Select an answer first
7foundation · easy
In a ransomware mitigation strategy, why is it important to have a well-tested backup and restore plan?
Select an answer first
8application · medium
A company uses Microsoft Defender for Cloud to assess the security posture of its Azure resources. They want to ensure that security updates are applied to all VMs. What should they implement?
Select an answer first
9application · medium
A company uses Microsoft Intune to manage its Windows devices. The security team wants to ensure that security updates are applied to all devices within 7 days of release, but they also want to avoid issues by testing updates first. What should they configure?
Select an answer first
10application · medium
A company uses Azure Backup to protect its Azure VMs. They want to ensure that backups are immutable and cannot be deleted by ransomware or a malicious insider. They also want to retain backups for 7 years for compliance. What should they configure?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SC-100

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “SC-100” is a trademark of its owner, used for identification only.