Design Solutions That Align with the Microsoft Cloud Adoption Framework for Azure (CAF) and the Azure Well-Architected Framework SC-100 Practice Questions (Page 7)

Questions 31–35

1. 31foundation · easy

   According to the Microsoft Cloud Adoption Framework, which solution is a recommended security and governance practice for a cloud environment?

   • AGranting all users contributor access to all resources to simplify management.
   • BUsing Azure Policy to enforce compliance and security standards across subscriptions.
   • CDisabling Azure Security Center to reduce costs.
   • DAvoiding the use of Azure Blueprints because they are deprecated.
   Reveal Solution Discussion Select an answer first
2. 32foundation · easy

   Which tool is commonly used in a DevSecOps process to scan code for vulnerabilities as part of the CI/CD pipeline?

   • AAzure DevOps with integrated security scanning.
   • BAzure Monitor
   • CAzure Cost Management
   • DAzure Policy
   Reveal Solution Discussion Select an answer first
4. 33foundation · easy

   Which component is a key part of a secure AI adoption strategy as recommended by the Microsoft Cloud Adoption Framework?

   • ADisabling all logging for AI services to protect user privacy.
   • BUsing a single shared key for all AI service authentication to simplify management.
   • CImplementing a data loss prevention (DLP) policy that covers AI services.
   • DAvoiding any human review of AI outputs to reduce bias.
   Reveal Solution Discussion Select an answer first
5. 34application · medium

   A company runs a mission-critical application in Azure. The security architect is reviewing the workload against the Azure Well-Architected Framework security pillar. The application uses a single storage account for all data, and the team has not defined data classification. Which recommendation should the architect prioritize?

   • AMove all data to a single storage account with a private endpoint to reduce exposure.
   • BEnable customer-managed keys for the storage account to meet compliance requirements.
   • CEnable Azure Defender for Storage and rely on its alerts to identify sensitive data.
   • DImplement a data classification scheme and use Azure Policy to enforce appropriate access controls and encryption based on classification.
   Reveal Solution Discussion Select an answer first
6. 35expert · hard

   A security architect is evaluating a mission-critical workload that runs on Azure VMs. The workload has a service-level agreement (SLA) of 99.99% uptime. The current design uses two VMs in the same availability set. The architect is reviewing the design against the Azure Well-Architected Framework. Which recommendation should the architect make?

   • AUse a single larger VM to reduce complexity.
   • BDeploy the VMs across multiple availability zones and use a load balancer.
   • CUse Azure Site Recovery to replicate the VMs to another region.
   • DKeep the availability set but add a third VM.
   Reveal Solution Discussion Select an answer first