Evaluate Solutions for Securing Microsoft 365 SC-100 Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   A security architect wants to discover which cloud applications are being used by employees without IT approval. Which capability of Microsoft Defender for Cloud Apps provides this visibility?

   • AApp governance
   • BData Loss Prevention
   • CCloud Discovery
   • DConditional Access App Control
   Reveal Solution Discussion Select an answer first
2. 17expert · hard

   A company is migrating from on-premises Exchange to Microsoft 365. The security team wants to ensure that email is protected against advanced threats. They have a limited budget and need to choose between Microsoft Defender for Office 365 Plan 1 and Plan 2. Which factor should most influence their decision?

   • APlan 1 provides the same protection as Plan 2 but at a lower cost.
   • BPlan 1 includes threat hunting but not Safe Links.
   • CPlan 2 is required for all organizations using Microsoft 365.
   • DPlan 2 includes automated investigation and response capabilities that Plan 1 lacks.
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A media company uses Microsoft 365 E5 and allows employees to use personal devices to access corporate resources. The security team wants to control access to Microsoft 365 apps based on the device's compliance status and also monitor for risky user behavior. Which two Microsoft 365 security features should they use together?

   • AMicrosoft Entra ID for identity protection and Microsoft Intune for device management.
   • BMicrosoft Defender for Cloud Apps for app control and Microsoft Secure Score for posture assessment.
   • CMicrosoft Intune for device compliance and Microsoft Defender for Cloud Apps for user behavior analytics.
   • DMicrosoft Defender for Office 365 for email protection and Microsoft Purview for data loss prevention.
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A company uses Microsoft 365 and also allows users to access Salesforce and Box. The security team wants to detect when users upload sensitive data to these third-party apps. Which Microsoft Defender for Cloud Apps feature should they use?

   • ACloud Discovery
   • BConditional Access App Control
   • CActivity policies
   • DApp connectors
   Reveal Solution Discussion Select an answer first
6. 20expert · hard

   A company has Microsoft Defender for Office 365 Plan 2 and Microsoft Defender for Cloud Apps. They want to detect and respond to a phishing campaign that uses malicious links in email. Which combination of features should they use?

   • AAnti-phishing policies only, and rely on Secure Score to measure effectiveness.
   • BSafe Links for email protection, and Defender for Cloud Apps activity policies to detect anomalous user behavior after clicking.
   • CSafe Attachments for email protection, and Cloud Discovery to identify the phishing campaign.
   • DUse Conditional Access App Control to block all access to the phishing site.
   Reveal Solution Discussion Select an answer first