Design Solutions That Align with the Microsoft Cloud Adoption Framework for Azure (CAF) and the Azure Well-Architected Framework SC-100 Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   A cybersecurity architect is designing a secure AI adoption strategy for an organization that plans to use Azure AI services. Which action is most aligned with the Microsoft Cloud Adoption Framework (CAF) guidance for secure AI adoption?

   • ADefine AI-specific security policies, data classification, and responsible AI guidelines before deployment.
   • BAllow all employees to use AI services without authentication to maximize productivity.
   • CUse only on-premises AI models to avoid cloud security risks entirely.
   • DDeploy AI services in a separate subscription without any network controls to encourage rapid experimentation.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   When evaluating a security strategy using the Microsoft Cloud Adoption Framework, which element is a core component of the CAF security baseline?

   • AIdentity and access management
   • BCost optimization
   • COperational excellence
   • DPerformance efficiency
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A company is implementing an Azure landing zone. The security architect needs to ensure that all VMs are joined to Azure AD and that only approved VM images are used. What should the architect configure in the landing zone?

   • AUse Azure AD Domain Services to join VMs to the domain.
   • BUse Azure Policy to enforce VM image approval and Azure AD join.
   • CUse Azure Automation runbooks to join VMs to Azure AD and check images.
   • DUse Azure Security Center to monitor VM compliance and alert on non-compliant VMs.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A company is migrating to Azure and has established a CAF-based governance strategy. The security team wants to ensure that all resources are tagged with the owner and cost center. They plan to use Azure Policy. What should the security architect recommend to enforce tagging?

   • AUse Azure Resource Manager templates to add tags to all resources.
   • BCreate an Azure Policy initiative that requires tags and applies it at the management group scope.
   • CAsk each team to manually add tags to their resources.
   • DUse Azure Cost Management to add tags to resources.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A security architect is evaluating an existing workload that runs on Azure VMs. The workload is mission-critical and requires high availability. The current design uses a single VM in a single availability zone. The architect is reviewing the design against the Azure Well-Architected Framework. Which recommendation should the architect make?

   • AUse Azure Site Recovery to replicate the VM to another region.
   • BKeep the single VM but enable Azure Backup to protect against data loss.
   • CMove the VM to a larger size to handle more load.
   • DDeploy the workload across multiple availability zones using a load balancer.
   Reveal Solution Discussion Select an answer first