A company is designing a new network architecture for a hybrid environment. They want to ensure that all outbound internet traffic from Azure virtual networks is inspected and that malicious traffic is blocked. They also want to enforce web filtering for users accessing the internet. Which combination of solutions should they use?

Azure Firewall for both network inspection and web filtering

Azure Firewall for network traffic inspection and Microsoft Entra Internet Access for web filtering

Microsoft Entra Internet Access for both network inspection and web filtering

Network Security Groups for traffic inspection and Microsoft Entra Internet Access for web filtering

A company has multiple Microsoft Entra tenants due to a merger. They want to secure access to Microsoft 365 and private applications across all tenants. They need to enforce consistent conditional access policies, including MFA and device compliance. They also want to avoid duplicating policies in each tenant. What should they do?

Use Microsoft Defender for Cloud Apps to enforce policies across tenants

Use Azure Firewall to route all traffic between tenants

Create separate conditional access policies in each tenant

Use Microsoft Entra Internet Access for Microsoft Services and Microsoft Entra Private Access with cross-tenant access policies

A company has a private application that is only accessible from the corporate network. They want to provide remote access to this application for a small group of users, but they want to avoid changing the application's network configuration. They also want to enforce MFA. What should they do?

Expose the application via Azure Application Gateway

Set up a site-to-site VPN for remote users

Use Azure Bastion for remote access

Deploy Microsoft Entra Private Access and configure conditional access for MFA

A company is designing a network security architecture for a hybrid environment. They have Azure workloads and on-premises resources. They want to ensure that all internet traffic from Azure is inspected, and that users accessing Microsoft 365 are protected. They also want to minimize the number of security solutions to manage. What should they implement?

Network Security Groups for all traffic

Microsoft Entra Internet Access for all traffic

Azure Firewall for Azure outbound traffic and Microsoft Entra Internet Access for Microsoft 365 traffic

What is the main purpose of using Microsoft Entra Internet Access for Microsoft Services?

To secure and control access to Microsoft 365 and other Microsoft cloud services

To provide a VPN connection to Microsoft services

To replace the need for Azure AD (now Microsoft Entra ID) for user authentication

To block all access to Microsoft services from non-corporate devices

Microsoft Certified:Cybersecurity Architect Expert

Domain 3Objective 4

Evaluate Solutions for Network Security and Security Service Edge (SSE) SC-100 Practice Questions (Page 2)

Part of the Design security solutions for infrastructure domain, which accounts for 25–30% of the SC-100 exam. Microsoft does not publish an official question count, but from its 120-minute exam (~50–80 total, ~13–24 in this domain), expect 3–6 from this objective — we provide 29 practice questions to prepare you well beyond it. (estimate)

29questions here

6free pages

4concepts

25–30%of the exam

Questions 6–10

6application · medium
A company is designing a new network architecture for a hybrid environment. They want to ensure that all outbound internet traffic from Azure virtual networks is inspected and that malicious traffic is blocked. They also want to enforce web filtering for users accessing the internet. Which combination of solutions should they use?
Select an answer first
7expert · hard
A company has multiple Microsoft Entra tenants due to a merger. They want to secure access to Microsoft 365 and private applications across all tenants. They need to enforce consistent conditional access policies, including MFA and device compliance. They also want to avoid duplicating policies in each tenant. What should they do?
Select an answer first
8application · medium
A company has a private application that is only accessible from the corporate network. They want to provide remote access to this application for a small group of users, but they want to avoid changing the application's network configuration. They also want to enforce MFA. What should they do?
Select an answer first
9expert · hard
A company is designing a network security architecture for a hybrid environment. They have Azure workloads and on-premises resources. They want to ensure that all internet traffic from Azure is inspected, and that users accessing Microsoft 365 are protected. They also want to minimize the number of security solutions to manage. What should they implement?
Select an answer first
10foundation · easy
What is the main purpose of using Microsoft Entra Internet Access for Microsoft Services?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SC-100

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “SC-100” is a trademark of its owner, used for identification only.

Evaluate Solutions for Network Security and Security Service Edge (SSE) SC-100 Practice Questions (Page 2)

Questions 6–10

A company has a private application that is only accessible from the corporate network. They want to provide remote access to this application for a small group of users, but they want to avoid changing the application's network configuration. They also want to enforce MFA. What should they do?

What is the main purpose of using Microsoft Entra Internet Access for Microsoft Services?

Keep studying — Design security solutions for infrastructure