A security architect wants to manage security policies and configurations for Windows, iOS, and Android devices in a Microsoft 365 environment. Which Microsoft 365 service provides unified endpoint management for these devices?

Microsoft Defender for Endpoint

A company requires that corporate data in Microsoft 365 be protected on personal devices that are not enrolled in Intune. Which Intune feature should they use?

Application protection policies

A company's security team is reviewing their Microsoft Secure Score and notices that their score is lower than expected. They have Microsoft 365 E5 licenses, which include Intune and Defender for Office 365. Which action is most likely to improve their score?

Purchase additional licenses to enable more improvement actions.

Review the improvement actions and implement those that are marked as 'Not started' and have a high score impact.

Wait for Microsoft to update the Secure Score baseline.

Disable security features that are not being used to reduce complexity.

A company uses Microsoft Teams and wants to prevent users from sharing sensitive documents externally. They have Microsoft Defender for Cloud Apps and Microsoft 365 DLP. Which solution should they use to enforce this policy?

Defender for Cloud Apps file policies

Conditional Access App Control for Teams

Microsoft 365 DLP policies for Teams

Microsoft Certified:Cybersecurity Architect Expert

Domain 4Objective 1

Evaluate Solutions for Securing Microsoft 365 SC-100 Practice Questions (Page 6)

Part of the Design security solutions for applications and data domain, which accounts for 20–25% of the SC-100 exam. Microsoft does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–20 in this domain), expect 10–20 from this objective — we provide 38 practice questions to prepare you well beyond it. (estimate)

38questions here

8free pages

5concepts

20–25%of the exam

Questions 26–30

26foundation · easy
A security architect wants to manage security policies and configurations for Windows, iOS, and Android devices in a Microsoft 365 environment. Which Microsoft 365 service provides unified endpoint management for these devices?
Select an answer first
27application · medium
A company requires that corporate data in Microsoft 365 be protected on personal devices that are not enrolled in Intune. Which Intune feature should they use?
Select an answer first
28expert · hard
A company's security team is reviewing their Microsoft Secure Score and notices that their score is lower than expected. They have Microsoft 365 E5 licenses, which include Intune and Defender for Office 365. Which action is most likely to improve their score?
Select an answer first
29application · medium
A company uses Microsoft Teams and wants to prevent users from sharing sensitive documents externally. They have Microsoft Defender for Cloud Apps and Microsoft 365 DLP. Which solution should they use to enforce this policy?
Select an answer first
30application · medium
A company requires that all corporate-owned Windows laptops be enrolled in Microsoft Intune and that they only run approved applications. Which Intune feature should the security team configure?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SC-100

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “SC-100” is a trademark of its owner, used for identification only.