Design Solutions That Align with the Microsoft Cloud Adoption Framework for Azure (CAF) and the Azure Well-Architected Framework SC-100 Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which practice is a security recommendation from the Azure Well-Architected Framework?

   • AImplementing a strong identity foundation with least privilege.
   • BDisabling multi-factor authentication for internal users to improve productivity.
   • CUsing a single shared storage account for all data to reduce management overhead.
   • DAllowing direct internet access to all virtual machines for ease of use.
   Reveal Solution Discussion Select an answer first
2. 7expert · hard

   A company is migrating to Azure and has established a CAF-based governance strategy. The security team wants to enforce a security baseline that includes requiring MFA for all users and blocking legacy authentication. The company has a mix of cloud-only and hybrid identities. What should the security architect recommend?

   • AUse Azure AD Privileged Identity Management to require MFA for administrators only.
   • BUse Azure AD Identity Protection to detect and remediate risky sign-ins.
   • CUse Azure AD Conditional Access policies to require MFA and block legacy authentication for all users.
   • DUse Azure AD Multi-Factor Authentication per-user settings to enable MFA for all users.
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A company is migrating to Azure and has created a single subscription with no management group structure. The security team is concerned about inconsistent security configurations across resources. According to the Microsoft Cloud Adoption Framework, what should the architect recommend as the first step?

   • ACreate a management group hierarchy and assign Azure Policy initiatives to enforce security baselines.
   • BCreate a new subscription for each workload and manually configure security settings.
   • CEnable Azure Security Center and rely on its recommendations to fix misconfigurations.
   • DUse Azure Blueprints to deploy a single resource group with all resources.
   Reveal Solution Discussion Select an answer first
5. 9expert · hard

   A company runs a critical application in Azure. The security architect is reviewing the workload against the Azure Well-Architected Framework. The application uses a single storage account for all data, and the team has not defined data classification. The company has a compliance requirement to encrypt all data at rest with customer-managed keys. Which recommendation should the architect prioritize?

   • AImplement data classification and enable customer-managed keys for the storage account.
   • BEnable Azure Defender for Storage and rely on its alerts to identify sensitive data.
   • CMove all data to a single storage account with a private endpoint to reduce exposure.
   • DEnable customer-managed keys for the storage account and rely on Azure Policy to enforce encryption.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   Which practice is a key element of a DevSecOps process aligned with the Microsoft Cloud Adoption Framework?

   • ASeparating security teams from development teams completely.
   • BUsing manual security reviews for every code change.
   • CPerforming security testing only after deployment.
   • DIntegrating security testing into the CI/CD pipeline.
   Reveal Solution Discussion Select an answer first