Design Solutions for Securing Privileged Access SC-100 Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A security architect is designing a privileged access solution for a small company that has a hybrid Active Directory environment. The company wants to allow administrators to manage domain controllers remotely from home. They also want to ensure that the administrative credentials are not exposed to the administrator's personal device. What should you recommend?

   • ARequire administrators to use a corporate-managed laptop with a VPN connection to the corporate network, and use Remote Desktop to connect to a jump server.
   • BAllow administrators to use their personal computers with a web-based RDP client to connect directly to domain controllers.
   • CDeploy a Privileged Access Workstation (PAW) that is enrolled in Microsoft Intune and require administrators to use Azure Bastion to connect to domain controllers.
   • DConfigure a site-to-site VPN from the administrator's home router to the corporate network and then use RDP to the domain controller.
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   Your organization has a large Azure environment with multiple subscriptions. You need to design a solution to manage cloud infrastructure entitlements effectively. The solution must ensure that users are granted the least privilege necessary and that access is reviewed regularly. What should you implement?

   • AAssign Azure RBAC roles directly to users at the subscription scope, and schedule quarterly access reviews.
   • BCreate custom Azure RBAC roles that combine multiple built-in roles, and assign them to users permanently.
   • CUse Azure Policy to deny all role assignments that are not in an approved list.
   • DUse Azure AD Privileged Identity Management (PIM) to manage Azure RBAC role assignments, and configure access reviews for those roles.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   What is the recommended approach for securing administrative access to a SaaS application like Microsoft 365?

   • AShare a single global admin account among IT staff
   • BRely solely on the SaaS provider's default security settings
   • CUse Conditional Access policies and Privileged Identity Management
   • DDisable all administrative roles to prevent misuse
   Reveal Solution Discussion Select an answer first
5. 9expert · hard

   An organization has a legacy Active Directory environment with a large number of domain admins. The security team wants to reduce the attack surface without disrupting the current administration model. They have a limited budget and cannot replace the existing domain controllers. Which control is most effective in mitigating credential theft attacks?

   • AAdd all domain admins to the Protected Users group and enforce Kerberos-only authentication.
   • BDeploy a new read-only domain controller (RODC) in each site.
   • CDisable NTLM authentication across the entire domain.
   • DEnable Credential Guard on all domain controllers.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   Which Microsoft 365 feature provides CIEM capabilities for multicloud environments?

   • AMicrosoft Intune
   • BMicrosoft Entra ID Governance
   • CMicrosoft Defender for Cloud Apps
   • DMicrosoft Entra Permissions Management
   Reveal Solution Discussion Select an answer first