A security team is reviewing their Microsoft Secure Score and notices that the score is high, but they have experienced a breach via an unpatched internet-facing VM. They want to better align their security efforts with actual risk. What should they do?

Use Microsoft Security Exposure Management to analyze attack paths and prioritize based on exploitability, not just Secure Score.

Focus only on recommendations with the highest score impact.

Disable the Secure Score for internet-facing VMs.

Increase the Secure Score target to force more remediation.

A large enterprise uses Microsoft Security Exposure Management. The security team wants to prioritize remediation efforts by focusing on attack paths that could lead to critical assets. They also need to track progress against security initiatives and reduce the attack surface. They have limited resources and cannot fix everything at once. What should they do?

Focus on reducing the attack surface by disabling all external-facing services.

Prioritize attack paths that involve critical assets and have a high likelihood of exploitation, then track progress via initiatives.

Use Defender for Cloud's regulatory compliance dashboard to prioritize actions.

Remediate all recommendations from Secure Score in order of score impact.

A security team wants to reduce the organization's attack surface by identifying and mitigating risky exposures. They also want to track the effectiveness of their efforts over time. What should they use?

Microsoft Security Exposure Management

Microsoft Defender for Cloud's Secure Score

Microsoft Defender for Office 365

A company has a large external attack surface with many domains and subdomains. They want to reduce the attack surface but also need to maintain business-critical web applications. They have limited budget for remediation. How should they prioritize?

Prioritize based on the age of the domain registration.

Use Defender EASM to identify high-risk assets and then use Security Exposure Management to determine which are part of attack paths to critical assets.

Use Secure Score to prioritize external assets.

Remove all unused domains and subdomains immediately.

A company has Azure subscriptions and 50 on-premises servers. They want to evaluate their security posture against the Microsoft Cloud Security Benchmark. They also want to include the on-premises servers in the assessment. What should they do?

Enable Defender for Cloud and connect on-premises servers via Azure Arc.

Use Microsoft Secure Score to assess on-premises servers.

Use Microsoft Defender for Cloud Apps to assess on-premises servers.

Use Azure Policy to apply the benchmark to on-premises servers directly.

Microsoft Certified:Cybersecurity Architect Expert

Domain 3Objective 1

Design Solutions for Security Posture Management in Hybrid and Multicloud Environments SC-100 Practice Questions (Page 1)

Part of the Design security solutions for infrastructure domain, which accounts for 25–30% of the SC-100 exam. Microsoft does not publish an official question count, but from its 120-minute exam (~50–80 total, ~13–24 in this domain), expect 3–6 from this objective — we provide 40 practice questions to prepare you well beyond it. (estimate)

40questions here

8free pages

7concepts

25–30%of the exam

7 Concepts in This Objective

Microsoft Defender for Cloud Evaluation
Microsoft Secure Score Evaluation
Integrated Security Posture Management Design
Cloud Workload Protection Selection
Azure Arc Integration Design
Defender EASM Solution Design
Posture Management Process Requirements

Questions 1–5

1expert · hard
A security team is reviewing their Microsoft Secure Score and notices that the score is high, but they have experienced a breach via an unpatched internet-facing VM. They want to better align their security efforts with actual risk. What should they do?
Select an answer first
2expert · hard
A large enterprise uses Microsoft Security Exposure Management. The security team wants to prioritize remediation efforts by focusing on attack paths that could lead to critical assets. They also need to track progress against security initiatives and reduce the attack surface. They have limited resources and cannot fix everything at once. What should they do?
Select an answer first
3application · medium
A security team wants to reduce the organization's attack surface by identifying and mitigating risky exposures. They also want to track the effectiveness of their efforts over time. What should they use?
Select an answer first
4expert · hard
A company has a large external attack surface with many domains and subdomains. They want to reduce the attack surface but also need to maintain business-critical web applications. They have limited budget for remediation. How should they prioritize?
Select an answer first
5application · medium
A company has Azure subscriptions and 50 on-premises servers. They want to evaluate their security posture against the Microsoft Cloud Security Benchmark. They also want to include the on-premises servers in the assessment. What should they do?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SC-100

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “SC-100” is a trademark of its owner, used for identification only.