Evaluate Solutions for Network Security and Security Service Edge (SSE) SC-100 Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A company uses Microsoft Entra Internet Access as a secure web gateway. They want to ensure that traffic to Microsoft 365 is also secured and that conditional access policies are applied. They also want to support users from a partner tenant. What should they configure?

   • AUse Azure Firewall to route Microsoft 365 traffic
   • BUse Azure Application Proxy for Microsoft 365
   • CEnable Microsoft Entra Internet Access for Microsoft Services and configure cross-tenant access policies
   • DConfigure Microsoft Defender for Cloud Apps for Microsoft 365
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   Which technology is a core component of Microsoft Entra Private Access solutions?

   • AAzure DDoS Protection for network layer attacks
   • BAzure VPN Gateway for site-to-site connectivity
   • CAzure Firewall for all network traffic
   • DMicrosoft Entra ID (Azure AD) for authentication and Conditional Access
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A company is designing a network for a new branch office. They want to minimize the use of a traditional VPN concentrator and instead use a cloud-based SSE solution. The branch office has a high-speed internet connection. What should you recommend?

   • ASet up a site-to-site VPN from the branch office to the main office.
   • BConfigure a DNS-based filtering service for all devices.
   • CDeploy Microsoft Entra Internet Access with the client installed on all branch office devices.
   • DUse Azure Firewall in the branch office to filter internet traffic.
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   When evaluating a network design for alignment with security requirements, which approach is considered a best practice?

   • AAllowing all outbound traffic to the internet to ensure user productivity
   • BImplementing a zero-trust model that verifies every access request regardless of network location
   • CUsing only network access control lists (ACLs) without any next-generation firewall capabilities
   • DPlacing all resources in a single virtual network to simplify IP address management
   Reveal Solution Discussion Select an answer first
6. 20expert · hard

   A company uses Microsoft Entra Internet Access as a secure web gateway. They have a requirement to block access to a specific category of websites for all users, including those accessing from unmanaged devices. They also need to allow access to Microsoft 365 without interruption. What should you configure?

   • AUse conditional access to block the category for all users.
   • BConfigure DNS-based filtering for unmanaged devices and client-based filtering for managed devices.
   • CCreate a web filtering policy that blocks the category and apply it to all users, and ensure Microsoft 365 traffic is not affected by the policy.
   • DBlock the category at the network level using Azure Firewall.
   Reveal Solution Discussion Select an answer first