A security architect needs to evaluate the security posture of an Azure subscription that contains multiple workloads. Which two components are used together in Microsoft Defender for Cloud to provide a continuous security posture assessment?

Azure Policy and Azure Blueprints

Microsoft Secure Score and the Microsoft Cloud Security Benchmark

Microsoft Sentinel and Azure Log Analytics

Azure Security Center and Azure Advisor

A company has enabled Defender for Cloud and wants to evaluate their security posture against the Microsoft Cloud Security Benchmark. They also want to see a numerical score that reflects their compliance. What should they use?

The regulatory compliance dashboard

Microsoft Defender for Cloud Apps

The Secure Score page in Defender for Cloud

A company wants to reduce its external attack surface by identifying and removing unused public IPs and open ports. They also want to understand how these exposures could be exploited in combination. Which two Microsoft solutions should they combine?

Microsoft Defender for Cloud Apps and Azure Firewall.

Microsoft Secure Score and Azure Policy.

Microsoft Defender EASM and Microsoft Security Exposure Management.

Microsoft Defender for Cloud and Microsoft Sentinel.

When analyzing Microsoft Secure Score, what is the primary benefit of reviewing the recommendations that are associated with the score?

They automatically remediate all identified security issues

They provide a real-time list of active security threats

They provide prioritized, actionable steps to improve the security posture

They replace the need for a separate vulnerability management solution

Microsoft Certified:Cybersecurity Architect Expert

Domain 3Objective 1

Design Solutions for Security Posture Management in Hybrid and Multicloud Environments SC-100 Practice Questions (Page 2)

Part of the Design security solutions for infrastructure domain, which accounts for 25–30% of the SC-100 exam. Microsoft does not publish an official question count, but from its 120-minute exam (~50–80 total, ~13–24 in this domain), expect 3–6 from this objective — we provide 40 practice questions to prepare you well beyond it. (estimate)

40questions here

8free pages

7concepts

25–30%of the exam

7 Concepts in This Objective

Microsoft Defender for Cloud Evaluation
Microsoft Secure Score Evaluation
Integrated Security Posture Management Design
Cloud Workload Protection Selection
Azure Arc Integration Design
Defender EASM Solution Design
Posture Management Process Requirements

Questions 6–10

6foundation · easy
A security architect needs to protect a Kubernetes cluster running in Azure Kubernetes Service (AKS) against workload threats. Which Microsoft Defender for Cloud plan should they enable?
Select an answer first
7foundation · easy
A security architect needs to evaluate the security posture of an Azure subscription that contains multiple workloads. Which two components are used together in Microsoft Defender for Cloud to provide a continuous security posture assessment?
Select an answer first
8application · medium
A company has enabled Defender for Cloud and wants to evaluate their security posture against the Microsoft Cloud Security Benchmark. They also want to see a numerical score that reflects their compliance. What should they use?
Select an answer first
9application · medium
A company wants to reduce its external attack surface by identifying and removing unused public IPs and open ports. They also want to understand how these exposures could be exploited in combination. Which two Microsoft solutions should they combine?
Select an answer first
10foundation · easy
When analyzing Microsoft Secure Score, what is the primary benefit of reviewing the recommendations that are associated with the score?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SC-100

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “SC-100” is a trademark of its owner, used for identification only.