A company uses Azure Backup to protect its on-premises file servers. After a ransomware attack, the security team discovers that the backups were also encrypted because the backup service account's credentials were compromised. You need to prevent this from happening again. What should you do?

Enable soft delete and immutability for the Recovery Services vault and use Azure AD Privileged Identity Management (PIM) to require approval for backup admin roles.

Increase the backup frequency to every 4 hours and keep more recovery points.

Store backups in a different Azure region and use geo-redundant storage (GRS).

Use Azure Site Recovery to replicate the file servers to Azure instead of Azure Backup.

A retail company is defining business resiliency goals. They have identified that their point-of-sale (POS) system is critical for revenue generation. The security team must prioritize threats to the POS system. Which threat should be considered the highest priority?

A phishing email that targets employees but does not affect the POS system.

A ransomware attack that encrypts the POS system's data and causes extended downtime.

A power outage in a single store that lasts for 30 minutes.

A minor software bug in the POS system that causes a brief delay in processing transactions.

A company runs a critical application in a hybrid environment: on-premises and Azure. The business continuity plan requires an RTO of 2 hours and an RPO of 15 minutes. The on-premises environment is a VMware cluster. The company wants to use Azure as the recovery site. What should they implement?

Use SQL Server Always On Availability Groups to replicate the database to Azure, and use Azure Backup for the VMs.

Use Azure Backup for on-premises VMs and restore to Azure when needed.

Use Azure Migrate to migrate on-premises VMs to Azure and then use Azure Site Recovery for replication.

Use Azure Site Recovery to replicate on-premises VMs to Azure, and use Azure SQL Database with active geo-replication for the database.

A government agency is defining business resiliency goals. They have identified that their citizen services portal is critical for public access. The security team must prioritize threats to the portal. Which threat should be considered the highest priority?

A scheduled maintenance window that causes the portal to be unavailable for 1 hour.

A distributed denial-of-service (DDoS) attack that makes the portal unavailable for several hours.

A phishing email sent to a few employees that does not affect the portal.

A minor misconfiguration in the portal's web server that causes a 5-minute outage.

Which practice is ESSENTIAL for securing backup and restore solutions against ransomware attacks?

Keeping backups online and accessible at all times for quick restore

Using the same credentials for backup and production systems

Storing backups on the same network segment as production systems

Enabling multi-factor authentication (MFA) for backup administrators

Microsoft Certified:Cybersecurity Architect Expert

Domain 1Objective 1

Design a Resiliency Strategy for Ransomware and Other Attacks Based on Microsoft Security Best Practices SC-100 Practice Questions (Page 4)

Part of the Design solutions that align with security best practices and priorities domain, which accounts for 20–25% of the SC-100 exam. Microsoft does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–20 in this domain), expect 3–7 from this objective — we provide 31 practice questions to prepare you well beyond it. (estimate)

31questions here

7free pages

5concepts

20–25%of the exam

Questions 16–20

16application · medium
A company uses Azure Backup to protect its on-premises file servers. After a ransomware attack, the security team discovers that the backups were also encrypted because the backup service account's credentials were compromised. You need to prevent this from happening again. What should you do?
Select an answer first
17application · medium
A retail company is defining business resiliency goals. They have identified that their point-of-sale (POS) system is critical for revenue generation. The security team must prioritize threats to the POS system. Which threat should be considered the highest priority?
Select an answer first
18expert · medium
A company runs a critical application in a hybrid environment: on-premises and Azure. The business continuity plan requires an RTO of 2 hours and an RPO of 15 minutes. The on-premises environment is a VMware cluster. The company wants to use Azure as the recovery site. What should they implement?
Select an answer first
19application · medium
A government agency is defining business resiliency goals. They have identified that their citizen services portal is critical for public access. The security team must prioritize threats to the portal. Which threat should be considered the highest priority?
Select an answer first
20foundation · easy
Which practice is ESSENTIAL for securing backup and restore solutions against ransomware attacks?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SC-100

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “SC-100” is a trademark of its owner, used for identification only.