Design Solutions That Align with the Microsoft Cloud Adoption Framework for Azure (CAF) and the Azure Well-Architected Framework SC-100 Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   A security architect is evaluating an organization's existing security strategy using the Microsoft Cloud Adoption Framework (CAF). Which CAF methodology should the architect primarily use to assess the current state and define target improvements?

   • AThe Migrate methodology
   • BThe Govern methodology
   • CThe Plan methodology
   • DThe Innovate methodology
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A company is migrating to Azure and has a security strategy that relies on manual configuration of each resource. The security architect is evaluating this strategy against the Microsoft Cloud Adoption Framework. Which gap is most critical?

   • ALack of automated policy enforcement for security baselines.
   • BLack of a multi-region deployment.
   • CLack of a cost management plan.
   • DLack of a dedicated security team.
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A company is developing an AI application and wants to integrate security into the CI/CD pipeline. The security architect needs to ensure that the AI models are not exposed to adversarial attacks. Which action should the architect recommend?

   • AUse Azure AI services with built-in security features and integrate model validation into the pipeline.
   • BDeploy the AI model directly to production without testing to speed up release.
   • CStore the model files in a public container for easy access by the pipeline.
   • DUse a single API key for all pipeline stages to simplify authentication.
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A multinational company is planning a large Azure adoption. They need a security architecture that supports multiple business units with different compliance requirements, while enabling centralized security monitoring. The company wants to avoid duplicating security tooling across environments. Which approach should the security architect recommend?

   • AGive each business unit its own Azure tenant to ensure complete isolation and separate security tooling.
   • BDeploy a single Azure landing zone with one management group and apply the same Azure Policy set to all subscriptions.
   • CCreate a management group hierarchy with platform and landing zone management groups, and assign Azure Policies at the appropriate scopes to enforce security baselines.
   • DUse Azure Policy only at the root management group to enforce all security requirements uniformly.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A security architect is reviewing an existing workload that runs a public-facing web application on Azure VMs. The current design uses a single VM with a public IP address and an NSG that allows inbound HTTP and HTTPS from any source. The architect is evaluating the design against the Azure Well-Architected Framework. Which recommendation best aligns with the security pillar?

   • AEnable Azure Defender for Servers on the VM to detect threats.
   • BPlace the VM behind an Azure Application Gateway or Azure Front Door and restrict NSG inbound rules to the service's IP addresses.
   • CMove the VM to a different region to improve latency for global users.
   • DKeep the current design but add a network security group rule that allows only HTTPS from the internet.
   Reveal Solution Discussion Select an answer first