A company uses Microsoft 365 and SharePoint Online for document collaboration. The security team wants to enforce a baseline that prevents users from sharing sensitive documents externally while still allowing internal sharing. They also need to block access from unmanaged devices. Which two Microsoft 365 security features should be combined to meet these requirements?

Data Loss Prevention (DLP) policies and Conditional Access policies

Information Rights Management (IRM) and multi-factor authentication (MFA)

SharePoint external sharing settings and Azure AD Identity Protection

Sensitivity labels with encryption and Conditional Access policies

When establishing a security baseline for a PaaS solution such as Azure App Service, which aspect is the customer primarily responsible for?

Configuring the application-level security settings and access controls within the PaaS service.

Patching the host operating system of the virtual machines running the PaaS service.

Deploying and maintaining the network firewalls that protect the PaaS service.

Managing the physical security of the data center where the PaaS service is hosted.

A company uses Microsoft 365 and Azure App Service for a custom line-of-business application. The security team wants to apply a consistent security baseline across both SaaS and PaaS services. Which common control should you prioritize to reduce the risk of account compromise?

Use Azure Policy to enforce tagging on all resources.

Configure network security groups (NSGs) for the App Service and rely on Microsoft 365's default security.

Enable multi-factor authentication (MFA) for all users who access Microsoft 365 and the custom application.

Deploy Azure Sentinel to monitor both Microsoft 365 and App Service logs.

Which Azure service is commonly used to enforce security baselines on PaaS resources by applying policies that govern resource configuration?

Azure Security Center (now Defender for Cloud)

Which Azure feature can be used to automatically apply security baseline configurations to IaaS virtual machines at scale?

Azure Policy with guest configuration

Microsoft Certified:Cybersecurity Architect Expert

Domain 3Objective 3

Specify Requirements for Securing SaaS, PaaS, and IaaS Services SC-100 Practice Questions (Page 1)

Part of the Design security solutions for infrastructure domain, which accounts for 25–30% of the SC-100 exam. Microsoft does not publish an official question count, but from its 120-minute exam (~50–80 total, ~13–24 in this domain), expect 3–6 from this objective — we provide 26 practice questions to prepare you well beyond it. (estimate)

26questions here

6free pages

8concepts

25–30%of the exam

Questions 1–5

1application · medium
A company uses Microsoft 365 and SharePoint Online for document collaboration. The security team wants to enforce a baseline that prevents users from sharing sensitive documents externally while still allowing internal sharing. They also need to block access from unmanaged devices. Which two Microsoft 365 security features should be combined to meet these requirements?
Select an answer first
2foundation · easy
When establishing a security baseline for a PaaS solution such as Azure App Service, which aspect is the customer primarily responsible for?
Select an answer first
3application · medium
A company uses Microsoft 365 and Azure App Service for a custom line-of-business application. The security team wants to apply a consistent security baseline across both SaaS and PaaS services. Which common control should you prioritize to reduce the risk of account compromise?
Select an answer first
4foundation · easy
Which Azure service is commonly used to enforce security baselines on PaaS resources by applying policies that govern resource configuration?
Select an answer first
5foundation · easy
Which Azure feature can be used to automatically apply security baseline configurations to IaaS virtual machines at scale?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SC-100

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “SC-100” is a trademark of its owner, used for identification only.