Design Solutions for Securing Privileged Access SC-100 Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   What is the primary goal of Cloud Infrastructure Entitlement Management (CIEM)?

   • ATo monitor network traffic between cloud resources
   • BTo encrypt all data stored in cloud environments
   • CTo manage and reduce excessive permissions across cloud infrastructure
   • DTo provide a single sign-on experience for end users
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   Which remote access method is recommended for securely connecting to a Privileged Access Workstation (PAW) when administrators work remotely?

   • AThird-party remote desktop tools without additional controls
   • BVPN without multi-factor authentication
   • CAzure Bastion with just-in-time access
   • DDirect RDP over the internet with a strong password
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   What is the primary purpose of access reviews in Microsoft Entra ID?

   • ATo periodically recertify and remove unnecessary access
   • BTo monitor sign-in logs for suspicious activity
   • CTo automatically assign privileged roles to new employees
   • DTo enforce multi-factor authentication for all users
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   In the enterprise access model, which tier is designed for administrative control of identity platforms and domain controllers?

   • ATier 0
   • BTier 1
   • CTier 2
   • DTier 3
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A company uses Microsoft Entra ID and has several users with permanent Global Administrator assignments. The security team wants to reduce the standing access while ensuring that at least two users can always approve emergency access requests. They also want to periodically confirm that the remaining privileged roles are still needed. What should you implement?

   • AKeep the current permanent Global Administrator assignments but add a conditional access policy that requires multi-factor authentication for all admins.
   • BRemove all Global Administrator assignments and rely on the built-in emergency access account that is always active.
   • CAssign Global Administrator to a security group and add users to that group as needed, then review group membership quarterly.
   • DConvert all Global Administrator assignments to eligible in Privileged Identity Management, require approval for activation, and schedule monthly access reviews for privileged roles.
   Reveal Solution Discussion Select an answer first