What is a common use case for Microsoft Entra Verified ID in a multicloud environment?

To provide decentralized identity verification for users accessing resources across clouds

To manage virtual machines in other clouds

To create VPN connections between clouds

To synchronize users between different cloud providers

Which Microsoft Entra feature can be used to grant users access to an Azure VM's administrative capabilities, such as starting or stopping the VM, without granting them full subscription owner rights?

Azure role-based access control (Azure RBAC)

A company has a complex hybrid identity environment with multiple on-premises Active Directory forests. They want to consolidate identity management in Microsoft Entra ID while maintaining on-premises authentication for legacy apps. They also want to enforce Conditional Access for all cloud apps. What should you implement?

Deploy a separate Entra ID tenant for each forest and use federation between them.

Use Active Directory Federation Services as the identity provider for Entra ID and all cloud apps.

Migrate all on-premises apps to Azure and use only Entra ID for authentication.

Use Microsoft Entra Connect to sync all forests to a single Entra ID tenant and use pass-through authentication for on-premises apps.

A company wants to allow external partners to access a specific SharePoint site using their own corporate credentials. They also want to enforce MFA for these partners and ensure that they cannot access other internal resources. What should you configure?

Use Microsoft Entra B2C and configure the SharePoint site as an application.

Set up a federation trust with each partner's identity provider and grant access to SharePoint.

Create local user accounts in SharePoint for each partner and enable MFA for those accounts.

Use Microsoft Entra B2B collaboration and invite the partners as guest users, then apply a Conditional Access policy to the SharePoint site that requires MFA.

Microsoft Certified:Cybersecurity Architect Expert

Domain 2Objective 2

Design Solutions for Identity and Access Management SC-100 Practice Questions (Page 1)

Part of the Design security operations, identity, and compliance capabilities domain, which accounts for 25–30% of the SC-100 exam. Microsoft does not publish an official question count, but from its 120-minute exam (~50–80 total, ~13–24 in this domain), expect 3–6 from this objective — we provide 45 practice questions to prepare you well beyond it. (estimate)

45questions here

9free pages

12concepts

25–30%of the exam

Questions 1–5

1foundation · easy
What is a common use case for Microsoft Entra Verified ID in a multicloud environment?
Select an answer first
2foundation · easy
Which of the following is a key principle of Zero Trust that is directly supported by Conditional Access policies?
Select an answer first
3foundation · easy
Which Microsoft Entra feature can be used to grant users access to an Azure VM's administrative capabilities, such as starting or stopping the VM, without granting them full subscription owner rights?
Select an answer first
4expert · hard
A company has a complex hybrid identity environment with multiple on-premises Active Directory forests. They want to consolidate identity management in Microsoft Entra ID while maintaining on-premises authentication for legacy apps. They also want to enforce Conditional Access for all cloud apps. What should you implement?
Select an answer first
5application · medium
A company wants to allow external partners to access a specific SharePoint site using their own corporate credentials. They also want to enforce MFA for these partners and ensure that they cannot access other internal resources. What should you configure?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SC-100

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “SC-100” is a trademark of its owner, used for identification only.

Design Solutions for Identity and Access Management SC-100 Practice Questions (Page 1)

Questions 1–5

What is a common use case for Microsoft Entra Verified ID in a multicloud environment?

Which of the following is a key principle of Zero Trust that is directly supported by Conditional Access policies?

Which Microsoft Entra feature can be used to grant users access to an Azure VM's administrative capabilities, such as starting or stopping the VM, without granting them full subscription owner rights?

A company wants to allow external partners to access a specific SharePoint site using their own corporate credentials. They also want to enforce MFA for these partners and ensure that they cannot access other internal resources. What should you configure?

Keep studying — Design security operations, identity, and compliance capabilities