Design Solutions for Security Posture Management in Hybrid and Multicloud Environments SC-100 Practice Questions (Page 7)

Questions 31–35

1. 31expert · hard

   A company has on-premises servers that are not connected to the internet. They want to use Azure Arc and Defender for Cloud to manage their security posture. What is the main challenge they need to address?

   • ADefender for Cloud cannot protect on-premises servers.
   • BAzure Arc requires outbound connectivity to Azure; they need to configure a proxy or allowlist the required endpoints.
   • CThey need to migrate the servers to Azure first.
   • DAzure Arc does not support on-premises servers.
   Reveal Solution Discussion Select an answer first
2. 32application · medium

   A company has a mix of Azure VMs, on-premises servers, and AWS EC2 instances. They want to protect these workloads against threats like malware, vulnerabilities, and suspicious activities. They also want to centralize security alerts in Microsoft Sentinel. What should they do?

   • AUse AWS GuardDuty for AWS and Azure Security Center for Azure, and manually forward alerts to Sentinel.
   • BEnable Defender for Cloud on all workloads and connect it to Microsoft Sentinel.
   • CUse Microsoft Defender for Cloud Apps to protect all workloads.
   • DUse Microsoft Defender for Endpoint only on the Azure VMs and AWS instances.
   Reveal Solution Discussion Select an answer first
4. 33foundation · easy

   What is the primary benefit of integrating on-premises servers with Azure Arc for security posture management?

   • AIt replaces the need for any on-premises security tools
   • BIt allows those servers to be assessed and protected by Microsoft Defender for Cloud
   • CIt provides a VPN connection between on-premises and Azure
   • DIt automatically migrates the servers to Azure virtual machines
   Reveal Solution Discussion Select an answer first
5. 34foundation · easy

   A security architect wants to use Microsoft Secure Score to assess the security posture of their organization. Which statement accurately describes how Secure Score is calculated?

   • AIt is a fixed score that only changes when new compliance standards are added
   • BIt is calculated by comparing the environment to the Microsoft Cloud Security Benchmark and assigning a pass/fail status to each resource
   • CIt is based solely on the number of security incidents detected in the last 30 days
   • DIt is based on the percentage of security recommendations that have been remediated, weighted by the importance of each recommendation
   Reveal Solution Discussion Select an answer first
6. 35expert · hard

   A company has enabled Defender for Cloud but is not seeing the Microsoft Cloud Security Benchmark assessments for their AWS resources. They have connected the AWS account. What is the most likely cause?

   • AThe Secure Score is not enabled for AWS.
   • BThe Microsoft Cloud Security Benchmark does not support AWS resources.
   • CThe AWS connector is not enabled for the specific AWS account or the required permissions are missing.
   • DThe AWS resources are not running on Azure.
   Reveal Solution Discussion Select an answer first