A security architect is defining a security baseline for Microsoft 365, a SaaS offering. Which approach best describes the purpose of a SaaS security baseline?

A list of security features that the SaaS provider offers, which the customer can optionally enable.

A contract with the SaaS provider that guarantees the provider will implement all security controls on behalf of the customer.

A set of configuration standards and policies applied to the SaaS service to ensure a consistent, secure configuration across the organization.

A technical architecture diagram showing how the SaaS service connects to the customer's on-premises network.

In a container orchestration platform like Kubernetes, which security feature is used to control which users and service accounts can perform specific actions?

Role-Based Access Control (RBAC)

A company uses Microsoft 365 and also runs a Windows Server VM for a legacy application. The security team wants to apply a baseline that includes conditional access policies for Microsoft 365 and just-in-time (JIT) access for the VM. Which service should you use to manage both policies centrally?

Azure Active Directory (Azure AD) Conditional Access

Microsoft Certified:Cybersecurity Architect Expert

Domain 3Objective 3

Specify Requirements for Securing SaaS, PaaS, and IaaS Services SC-100 Practice Questions (Page 2)

Part of the Design security solutions for infrastructure domain, which accounts for 25–30% of the SC-100 exam. Microsoft does not publish an official question count, but from its 120-minute exam (~50–80 total, ~13–24 in this domain), expect 3–6 from this objective — we provide 26 practice questions to prepare you well beyond it. (estimate)

26questions here

6free pages

8concepts

25–30%of the exam

Questions 6–10

6foundation · easy
A security architect is defining a security baseline for Microsoft 365, a SaaS offering. Which approach best describes the purpose of a SaaS security baseline?
Select an answer first
7foundation · easy
In a container orchestration platform like Kubernetes, which security feature is used to control which users and service accounts can perform specific actions?
Select an answer first
8foundation · easy
Which security control is essential for protecting a web application from common attacks such as SQL injection and cross-site scripting?
Select an answer first
9application · medium
A company uses Microsoft 365 and also runs a Windows Server VM for a legacy application. The security team wants to apply a baseline that includes conditional access policies for Microsoft 365 and just-in-time (JIT) access for the VM. Which service should you use to manage both policies centrally?
Select an answer first
10foundation · easy
Which Azure service is specifically designed to securely manage and monitor IoT devices at scale?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SC-100

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “SC-100” is a trademark of its owner, used for identification only.

Specify Requirements for Securing SaaS, PaaS, and IaaS Services SC-100 Practice Questions (Page 2)

Questions 6–10

A security architect is defining a security baseline for Microsoft 365, a SaaS offering. Which approach best describes the purpose of a SaaS security baseline?

In a container orchestration platform like Kubernetes, which security feature is used to control which users and service accounts can perform specific actions?

Which security control is essential for protecting a web application from common attacks such as SQL injection and cross-site scripting?

A company uses Microsoft 365 and also runs a Windows Server VM for a legacy application. The security team wants to apply a baseline that includes conditional access policies for Microsoft 365 and just-in-time (JIT) access for the VM. Which service should you use to manage both policies centrally?

Which Azure service is specifically designed to securely manage and monitor IoT devices at scale?

Keep studying — Design security solutions for infrastructure