A university uses Microsoft 365 E5 and has a mix of faculty and students. The security team wants to protect against malicious links in email and Teams messages, but they also want to allow legitimate external research collaboration links. They have already enabled Safe Links for all users. Which additional Defender for Office 365 setting should they configure to reduce false positives while maintaining protection?

Add the research collaboration domains to the Safe Links 'Do not rewrite' list.

Set the Safe Links policy to 'Do not track user clicks' to avoid blocking legitimate links.

Create a separate Safe Links policy for faculty that has a higher threshold for blocking.

Use Defender for Cloud Apps to allow-list the research domains at the proxy level.

A company's security team is using Microsoft Secure Score to track their security posture. They notice that some improvement actions are marked as 'Not scored' and want to understand why. What is a common reason for an action to be 'Not scored'?

The action has been deprecated by Microsoft.

The action requires a license that the tenant does not have.

The action is only available in preview.

The action is not applicable to the tenant's industry.

A company's security team is reviewing their Microsoft Secure Score and notices that several improvement actions related to device management are not being counted. They have Microsoft Intune deployed but are not using it for all devices. What is the most likely reason for the incomplete score?

The devices are running an unsupported operating system.

Devices are not enrolled in Intune, so the improvement actions cannot be assessed.

The Secure Score dashboard is not configured to show device-related actions.

The Intune tenant is not connected to Microsoft 365 Defender.

Microsoft Certified:Cybersecurity Architect Expert

Domain 4Objective 1

Evaluate Solutions for Securing Microsoft 365 SC-100 Practice Questions (Page 2)

Part of the Design security solutions for applications and data domain, which accounts for 20–25% of the SC-100 exam. Microsoft does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–20 in this domain), expect 10–20 from this objective — we provide 38 practice questions to prepare you well beyond it. (estimate)

38questions here

8free pages

5concepts

20–25%of the exam

Questions 6–10

6application · medium
A company uses Microsoft Defender for Cloud Apps to monitor user activities in Microsoft 365. They want to receive an alert when a user downloads more than 10 GB of data from SharePoint Online in a single day. Which type of policy should they create?
Select an answer first
7application · medium
A university uses Microsoft 365 E5 and has a mix of faculty and students. The security team wants to protect against malicious links in email and Teams messages, but they also want to allow legitimate external research collaboration links. They have already enabled Safe Links for all users. Which additional Defender for Office 365 setting should they configure to reduce false positives while maintaining protection?
Select an answer first
8application · medium
A company is evaluating Microsoft Defender for Office 365. They want to ensure that users are warned before clicking on links in email messages that are known to be malicious. Which feature should they enable?
Select an answer first
9application · medium
A company's security team is using Microsoft Secure Score to track their security posture. They notice that some improvement actions are marked as 'Not scored' and want to understand why. What is a common reason for an action to be 'Not scored'?
Select an answer first
10application · medium
A company's security team is reviewing their Microsoft Secure Score and notices that several improvement actions related to device management are not being counted. They have Microsoft Intune deployed but are not using it for all devices. What is the most likely reason for the incomplete score?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SC-100

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “SC-100” is a trademark of its owner, used for identification only.

Evaluate Solutions for Securing Microsoft 365 SC-100 Practice Questions (Page 2)

Questions 6–10

A company uses Microsoft Defender for Cloud Apps to monitor user activities in Microsoft 365. They want to receive an alert when a user downloads more than 10 GB of data from SharePoint Online in a single day. Which type of policy should they create?

A company is evaluating Microsoft Defender for Office 365. They want to ensure that users are warned before clicking on links in email messages that are known to be malicious. Which feature should they enable?

A company's security team is using Microsoft Secure Score to track their security posture. They notice that some improvement actions are marked as 'Not scored' and want to understand why. What is a common reason for an action to be 'Not scored'?

A company's security team is reviewing their Microsoft Secure Score and notices that several improvement actions related to device management are not being counted. They have Microsoft Intune deployed but are not using it for all devices. What is the most likely reason for the incomplete score?

Keep studying — Design security solutions for applications and data