A multinational company stores its most critical data in an on-premises SAN and replicates it to a secondary datacenter using synchronous replication. After a ransomware incident encrypted both sites, the security team realizes they have no isolated recovery point. You need to design a backup strategy that ensures recoverability even if the primary and secondary sites are compromised simultaneously. What should you implement?

Configure Azure Site Recovery to replicate the on-premises VMs to Azure with a recovery point objective of 15 minutes.

Increase the frequency of synchronous replication to the secondary datacenter and enable point-in-time snapshots on the SAN.

Store backups on a network-attached storage (NAS) device in the primary datacenter with access restricted to the backup admin account.

Enable immutable backups in Azure Backup for the on-premises servers, storing them in a separate Azure region with a 30-day retention lock.

What is the primary purpose of defining recovery time objective (RTO) and recovery point objective (RPO) for each workload in a BCDR strategy?

To calculate the exact cost of the BCDR solution

To identify the root cause of previous outages

To assign ownership of the BCDR plan to specific teams

To determine the maximum acceptable downtime and data loss for the workload

A company uses Microsoft Endpoint Configuration Manager to manage its Windows servers. The security team wants to ensure that security updates are applied to all servers within 14 days of release, but they also want to avoid issues by testing updates first. What should they configure?

Configure Windows Update to automatically install updates without any deferral.

Use Configuration Manager to deploy updates only to pilot servers.

Create multiple deployment rings in Configuration Manager, starting with a pilot collection for testing, then rolling out to other collections over 14 days.

Set all servers to the 'Semi-Annual Channel' and defer updates by 30 days.

A company uses Microsoft Defender for Cloud to assess the security posture of its Azure VMs. The security team wants to ensure that security updates are applied effectively to all VMs. What should they use?

Microsoft Intune to manage updates for Azure VMs.

Defender for Cloud's regulatory compliance dashboard to identify missing updates and apply them via Azure Update Manager.

Azure Automation Update Management to schedule updates, but only for VMs in a specific resource group.

Azure Policy to automatically deploy updates to all VMs.

A company operates workloads in an on-premises datacenter and in two public cloud providers. Which strategy is MOST appropriate for designing business continuity and disaster recovery (BCDR) in this hybrid and multicloud environment?

Design BCDR per workload, considering dependencies and recovery objectives across all environments

Implement the same BCDR plan for every workload regardless of criticality

Replicate all data to the on-premises datacenter only

Use a single cloud provider for all recovery to simplify management

Microsoft Certified:Cybersecurity Architect Expert

Domain 1Objective 1

Design a Resiliency Strategy for Ransomware and Other Attacks Based on Microsoft Security Best Practices SC-100 Practice Questions (Page 6)

Part of the Design solutions that align with security best practices and priorities domain, which accounts for 20–25% of the SC-100 exam. Microsoft does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–20 in this domain), expect 3–7 from this objective — we provide 31 practice questions to prepare you well beyond it. (estimate)

31questions here

7free pages

5concepts

20–25%of the exam

Questions 26–30

26application · medium
A multinational company stores its most critical data in an on-premises SAN and replicates it to a secondary datacenter using synchronous replication. After a ransomware incident encrypted both sites, the security team realizes they have no isolated recovery point. You need to design a backup strategy that ensures recoverability even if the primary and secondary sites are compromised simultaneously. What should you implement?
Select an answer first
27foundation · easy
What is the primary purpose of defining recovery time objective (RTO) and recovery point objective (RPO) for each workload in a BCDR strategy?
Select an answer first
28application · medium
A company uses Microsoft Endpoint Configuration Manager to manage its Windows servers. The security team wants to ensure that security updates are applied to all servers within 14 days of release, but they also want to avoid issues by testing updates first. What should they configure?
Select an answer first
29application · medium
A company uses Microsoft Defender for Cloud to assess the security posture of its Azure VMs. The security team wants to ensure that security updates are applied effectively to all VMs. What should they use?
Select an answer first
30foundation · easy
A company operates workloads in an on-premises datacenter and in two public cloud providers. Which strategy is MOST appropriate for designing business continuity and disaster recovery (BCDR) in this hybrid and multicloud environment?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SC-100

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “SC-100” is a trademark of its owner, used for identification only.