Microsoft Certified:Cybersecurity Architect Expert
Domain 2Objective 2
Design Solutions for Identity and Access Management SC-100 Practice Questions (Page 7)
Part of the Design security operations, identity, and compliance capabilities domain, which accounts for 25–30% of the SC-100 exam. Microsoft does not publish an official question count, but from its 120-minute exam (~50–80 total, ~13–24 in this domain), expect 3–6 from this objective — we provide 45 practice questions to prepare you well beyond it. (estimate)
45questions here
9free pages
12concepts
25–30%of the exam
Questions 31–35
- 31
Your company has an on-premises Active Directory environment. You need to specify requirements to enhance security of the AD DS environment, particularly against credential theft and lateral movement. The solution must be cost-effective and not require additional hardware. What should you recommend?
Select an answer first - 32
Your company uses AWS for some workloads and Azure for others. You need to design a single identity solution so that users can access AWS resources using their Azure AD credentials. The solution must support Conditional Access and MFA. What should you implement?
Select an answer first - 33
Your organization uses Microsoft 365 and a third-party HR SaaS application. You need to design access for the HR app so that only users who are in the HR department and are compliant with your device policies can access it. The solution must also block access from unexpected locations. What should you configure?
Select an answer first - 34
What is the primary purpose of integrating a SaaS application with Microsoft Entra ID for single sign-on (SSO)?
Select an answer first - 35
Your company has an Azure VM running a legacy application that only supports Kerberos authentication. You need to allow users to access the application from the internet using their Azure AD credentials, and you must enforce MFA. You have deployed Microsoft Entra Application Proxy, but users are still prompted for their on-premises password. What should you do?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “SC-100” is a trademark of its owner, used for identification only.