Microsoft Certified:Cybersecurity Architect Expert
Domain 4Objective 1
Evaluate Solutions for Securing Microsoft 365 SC-100 Practice Questions (Page 3)
Part of the Design security solutions for applications and data domain, which accounts for 20–25% of the SC-100 exam. Microsoft does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–20 in this domain), expect 10–20 from this objective — we provide 38 practice questions to prepare you well beyond it. (estimate)
38questions here
8free pages
5concepts
20–25%of the exam
Questions 11–15
- 11
A tech startup uses Microsoft 365 E5. They have enabled Defender for Office 365 P2 and want to protect against business email compromise (BEC) attacks that impersonate their CEO. They also want to be alerted when a user's account is used from a new location. Which two features should they configure?
Select an answer first - 12
A company uses Microsoft 365 for email and Teams. The security team wants to ensure that external users who are invited to Teams channels are subject to the same data-loss prevention (DLP) policies as internal users. Which configuration should the team implement?
Select an answer first - 13
A company's security team is reviewing their Microsoft 365 tenant. They notice that Microsoft Secure Score has dropped by 15 points over the last month. The team suspects that recent configuration changes are the cause. Which action should the team take first to identify the specific changes that contributed to the score drop?
Select an answer first - 14
A global consulting firm uses Microsoft 365 E5. They have Defender for Office 365 P2 and Defender for Cloud Apps with app connectors for Microsoft 365. The security team discovered that a user's account was compromised and used to download sensitive files from SharePoint Online. The team needs to determine the full scope of the exposure, including whether the attacker also accessed other cloud apps. Which combination of actions should they take?
Select an answer first - 15
A retail company has 500 Windows 11 laptops enrolled in Microsoft Intune. The security team wants to ensure that only devices with a healthy BitLocker status and current antivirus definitions can access Exchange Online. They also want to receive a Secure Score credit for this control. Which configuration should they implement?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “SC-100” is a trademark of its owner, used for identification only.