A security architect needs to evaluate the security configuration of Microsoft 365 productivity workloads such as Exchange Online, SharePoint, and Teams. Which Microsoft 365 feature provides a centralized, workload-specific set of security recommendations and configuration baselines?

Microsoft Defender for Cloud regulatory compliance

Secure Score improvement actions

Microsoft Entra Permissions Management

A security architect needs a single, organization-wide metric that reflects how well the Microsoft 365 tenant aligns with security best practices and recommended configuration baselines. Which Microsoft 365 security capability provides this metric?

Microsoft Defender for Cloud Apps

Microsoft Purview compliance portal

A security architect needs to evaluate the effectiveness of Microsoft Defender for Office 365 in protecting against sophisticated email threats. Which capability of Defender for Office 365 provides automated investigation and response to email-based attacks?

Automated Investigation and Response (AIR)

Microsoft Entra Conditional Access

A company's security team is comparing their Microsoft Secure Score with industry benchmarks. They notice that their score is lower than the average for their industry. Which action should they take to improve their score?

Increase the number of users in the tenant to improve the score.

Compare their score with the benchmark and implement all actions that the benchmark suggests.

Disable security features that are not being used to simplify the environment.

Implement the improvement actions that have the highest score impact and are relevant to their environment.

Microsoft Certified:Cybersecurity Architect Expert

Domain 4Objective 1

Evaluate Solutions for Securing Microsoft 365 SC-100 Practice Questions (Page 5)

Part of the Design security solutions for applications and data domain, which accounts for 20–25% of the SC-100 exam. Microsoft does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–20 in this domain), expect 10–20 from this objective — we provide 38 practice questions to prepare you well beyond it. (estimate)

38questions here

8free pages

5concepts

20–25%of the exam

Questions 21–25

21foundation · easy
A security architect needs to evaluate the security configuration of Microsoft 365 productivity workloads such as Exchange Online, SharePoint, and Teams. Which Microsoft 365 feature provides a centralized, workload-specific set of security recommendations and configuration baselines?
Select an answer first
22application · medium
A company is planning to deploy Microsoft Defender for Office 365. They want to ensure that messages with malicious attachments are quarantined before they reach user mailboxes. Which feature should they configure?
Select an answer first
23foundation · easy
A security architect needs a single, organization-wide metric that reflects how well the Microsoft 365 tenant aligns with security best practices and recommended configuration baselines. Which Microsoft 365 security capability provides this metric?
Select an answer first
24foundation · easy
A security architect needs to evaluate the effectiveness of Microsoft Defender for Office 365 in protecting against sophisticated email threats. Which capability of Defender for Office 365 provides automated investigation and response to email-based attacks?
Select an answer first
25application · medium
A company's security team is comparing their Microsoft Secure Score with industry benchmarks. They notice that their score is lower than the average for their industry. Which action should they take to improve their score?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SC-100

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “SC-100” is a trademark of its owner, used for identification only.