Evaluate Solutions for Network Security and Security Service Edge (SSE) SC-100 Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A company has several legacy on-premises applications that require direct TCP access. They want to replace their legacy VPN with Microsoft Entra Private Access. The applications are hosted on servers that are not domain-joined. What should you do to enable secure access to these applications?

   • ACreate a site-to-site VPN from the company's headquarters to the application servers.
   • BConfigure conditional access policies to require hybrid Azure AD join for all users.
   • CDeploy Azure Application Gateway in front of the applications.
   • DInstall the Microsoft Entra Private Access connector on each application server.
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A company uses Microsoft Entra Internet Access to secure Microsoft 365 traffic. They also have a legacy on-premises application that is accessed through Microsoft Entra Private Access. They want to apply a unified conditional access policy that requires multifactor authentication for both Microsoft 365 and the legacy application. What should you do?

   • AUse Microsoft Entra Internet Access to enforce MFA for all traffic.
   • BConfigure MFA only for the legacy application because Microsoft 365 already has MFA.
   • CCreate a conditional access policy that targets all trusted resources and requires MFA.
   • DCreate separate conditional access policies for Microsoft 365 and the legacy application.
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A company has a partner organization that uses Microsoft Entra Internet Access. The partner wants to access the company's Microsoft 365 tenant. The company wants to ensure that the partner's users are subject to the company's conditional access policies. What should you configure?

   • ACreate guest accounts for the partner's users and assign licenses.
   • BSet up a federation trust between the two tenants.
   • CConfigure cross-tenant access settings to trust the partner's conditional access and device compliance claims.
   • DUse Azure AD B2B collaboration with a custom policy.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   A cybersecurity architect is reviewing a proposed network design for a new application. Which practice is most aligned with industry best practices for network security?

   • AUsing a single flat network to simplify management and reduce the attack surface
   • BPlacing all application servers in the same subnet as the database servers to reduce latency
   • CSegmenting the network into zones with different security requirements and controlling traffic between them
   • DRelying solely on the perimeter firewall for all traffic filtering, including internal traffic
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A company uses Microsoft Entra Internet Access to secure access to Microsoft 365. They have a partner organization that uses a separate Microsoft Entra tenant. The partner's users need to access a shared SharePoint site hosted in the company's tenant. The company wants to apply the same web gateway protections to the partner users. What should you configure?

   • AConfigure a cross-tenant access policy that trusts the partner's conditional access and device compliance claims.
   • BSet up a site-to-site VPN between the partner and the company.
   • CCreate a guest user account for each partner user in the company's tenant.
   • DUse Azure AD Application Proxy to publish the SharePoint site.
   Reveal Solution Discussion Select an answer first