Design Solutions That Align with the Microsoft Cybersecurity Reference Architectures (MCRA) and Microsoft Cloud Security Benchmark (MCSB) SC-100 Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A retail company is migrating its on-premises applications to Azure. The security architect must design a solution that aligns with the Zero Trust adoption framework and the MCRA. The company wants to implement a phased approach that starts with identity and then expands to other pillars. Which initial step should the architect recommend?

   • AEnable Azure Security Center's regulatory compliance dashboard to monitor all workloads.
   • BImplement Azure AD Conditional Access policies that require MFA and device compliance for all cloud applications.
   • CDeploy Azure Firewall and configure network segmentation for all virtual networks.
   • DMigrate all applications to Azure App Service before implementing any security controls.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   A cybersecurity architect is reviewing the Microsoft Cybersecurity Reference Architectures (MCRA) to plan a security strategy. Which statement best describes the primary purpose of the MCRA?

   • AIt is a compliance framework that defines mandatory legal requirements for all cloud deployments.
   • BIt is a certification exam blueprint that lists all questions for the SC-100 exam.
   • CIt is a pricing model that determines the cost of Microsoft security services.
   • DIt provides a set of prescriptive security architectures and patterns that map to Microsoft security capabilities and best practices.
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A government agency is deploying an AI-based document classification system that handles sensitive information. The security architect must ensure the solution aligns with the Microsoft Cloud Security Benchmark (MCSB). The agency is concerned about data residency and the potential for the AI model to be compromised. Which set of controls should the architect prioritize?

   • AUse Azure Policy to enforce the use of a specific AI model version and audit all API calls.
   • BEncrypt all data at rest using customer-managed keys and store the keys in Azure Key Vault.
   • CDeploy the AI service in a specific Azure region that meets data residency requirements and use Azure AI Content Safety to filter malicious inputs.
   • DUse Azure AI services with private endpoints and disable all public network access.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   Which tool or service is commonly used in the Microsoft ecosystem to help secure the software supply chain by scanning for vulnerabilities in container images?

   • AAzure Policy
   • BAzure Firewall
   • CMicrosoft Defender for Cloud
   • DAzure DDoS Protection
   Reveal Solution Discussion Select an answer first
6. 5expert · hard

   A software-as-a-service (SaaS) provider is designing defenses against external attacks aligned with the MCRA. The provider's application is built on microservices and uses a CI/CD pipeline that pulls open-source libraries. The security architect must protect the application from external attacks and supply chain risks. Which combination of controls should be implemented?

   • ADeploy Azure Firewall and NSGs to restrict network traffic.
   • BDeploy Azure Front Door with WAF and DDoS protection, and use Azure Policy to enforce that only approved container images are used.
   • CUse Azure API Management to expose the microservices and require API keys.
   • DEnable Azure Security Center (Defender for Cloud) recommendations only.
   Reveal Solution Discussion Select an answer first