Your company uses both Azure and Google Cloud Platform (GCP). You need to design a single identity solution so that users can access GCP resources using their Azure AD credentials. The solution must enforce MFA and Conditional Access. What should you implement?

Set up a VPN between Azure and GCP and use Azure AD authentication

Create a read-only domain controller in GCP

Configure Azure AD as an identity provider for GCP using SAML federation

Use Azure AD Domain Services and join GCP VMs to it

Which of the following is a recommended security configuration for Active Directory Domain Services (AD DS) to reduce the attack surface?

Enable LDAP signing and channel binding

Use NTLM authentication instead of Kerberos

Which Microsoft Entra feature enables users to access on-premises web applications through Microsoft Entra ID, providing single sign-on and Conditional Access support?

Microsoft Entra Application Proxy

Microsoft Entra Domain Services

A company has an on-premises Active Directory forest and uses Microsoft Entra ID for cloud apps. They want to enable single sign-on for on-premises applications that use Kerberos authentication, while also enforcing Conditional Access policies for those applications. What should you implement?

Implement Active Directory Federation Services and publish the apps through a web application proxy.

Use Microsoft Entra Connect to sync users and enable password hash synchronization for single sign-on.

Set up a site-to-site VPN and join the on-premises apps to Microsoft Entra ID.

Deploy Microsoft Entra application proxy and configure the on-premises apps to use Kerberos constrained delegation.

Microsoft Certified:Cybersecurity Architect Expert

Domain 2Objective 2

Design Solutions for Identity and Access Management SC-100 Practice Questions (Page 8)

Part of the Design security operations, identity, and compliance capabilities domain, which accounts for 25–30% of the SC-100 exam. Microsoft does not publish an official question count, but from its 120-minute exam (~50–80 total, ~13–24 in this domain), expect 3–6 from this objective — we provide 45 practice questions to prepare you well beyond it. (estimate)

45questions here

9free pages

12concepts

25–30%of the exam

Questions 36–40

36expert · hard
Your company uses both Azure and Google Cloud Platform (GCP). You need to design a single identity solution so that users can access GCP resources using their Azure AD credentials. The solution must enforce MFA and Conditional Access. What should you implement?
Select an answer first
37foundation · easy
Which of the following is a recommended security configuration for Active Directory Domain Services (AD DS) to reduce the attack surface?
Select an answer first
38foundation · easy
Which Microsoft Entra feature enables users to access on-premises web applications through Microsoft Entra ID, providing single sign-on and Conditional Access support?
Select an answer first
39application · medium
A company has an on-premises Active Directory forest and uses Microsoft Entra ID for cloud apps. They want to enable single sign-on for on-premises applications that use Kerberos authentication, while also enforcing Conditional Access policies for those applications. What should you implement?
Select an answer first
40foundation · easy
Which Microsoft Entra ID feature provides identity protection capabilities such as risk detection and automated remediation?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SC-100

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “SC-100” is a trademark of its owner, used for identification only.